Re: MySQL security fix

2000-02-09 Thread J.H.M. Dassen \(Ray\)
I'm not on debian-security, so Ray is forwarding this for me :) Quoting J.H.M. Dassen (Ray) ([EMAIL PROTECTED]): > There was a small fix provided which I applied to my mysql-server package > and uploaded it as mysql-server_3.22.30-4_i386.deb. The author of MySQL made an official fix for this bug.

MySQL security fix

2000-02-09 Thread Christian Hammers
Hello There was a Bugtraq announcement for a MySQL Server security flaw today. The case was a password checking routine that allowed every user on a host that was allowed to connect to a mysql server to guess the password of an existing(!) user with only 32 tries. There was a small fix provide