full-disclosure - MySQL and the user "su"

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <41D4FBB1.4020304@koehntopp.de>
From: kris at koehntopp.de (Kristian Koehntopp)
Subject: MySQL and the user "su"

> I have today determined that I can connect to a local MySQL-server per
>  "mysql -usu".  I regard that to error, can that someone confirm?

You have entries in your mysql.user table that contain the hostname 
localhost and have an empty username field, I presume. If so, please 
read up on MySQL permissions.

Kristian