Posted on 01/27/2005 6:20:28 PM PST by zeugma
"A report on the Australian whirlpool forum suggest that a worm is currently taking out MySQL servers running on Windows. We have seen this happen with MSSQL before (not just 'Slammer', but also SQLSnake that used SA accounts without password). The SANS Internet Storm Center suggests that a rise in port 3306 scans can be attributed to the new worm, and is asking for observations to help figure this out. It appears the worm creates a file called 'spoolcll.exe'."
Microsoft just announced record earnings again. I guess that's easier when you don't have to worry about debugging your code, or the damage defective products do to clients.
This excerpt appears to be about MySQL not MS SQL Server.
A good reason to consider PostgreSQL.
You may want to reread this :) . This affects MYSQL, not MS-SQL. Mysql is an open source database --- and its just taking advantage of poorly configured servers, not a flaw in the product itself.
YourSQL?
None of my Macs appear to be having any problems.
:-)
All of you are correct, I misread the thing entirely. I guess I can expect quite a few deserved flamaes. It is definitely a good idea to secure your SQL server better than I proofed the post. :-)
In my defense, MSSQL was mentioned, but only in referring to past vulnerabilities discovered.
no problem, happens to us all
Microsoft announced record earnings again because they have the best products, period. In your haste to spew hate, you didn't even notice this problem is strictly related to another one of your foreign pieces of freeware, MySQL. Must suck to be you about now.
Everyone gets one free bash as my pennance tonight. That was yours. Have a great evening!
No. HisSQL.
MySQL Malware Just Wants to Chat
Unix and Linux systems running MySQL currently are not at risk from the bot.
Ya, but the way methods used to hack MySQL might be valid in the Unix world ao care should be taken. Of course, anyone who leaves the default administrator password on their database pretty much deserves to be rooted.
LOL ! Yeah, I agree.
This was a brute-force method for compromising the servers. Keep strong passwords, and you should be OK.
Basically, what this thing does is keep a list of common passwords and just tries them all until one works. Use non-dictionary, mixed-case, alphanumeric/symbolic passwords and you should be fine.
MySQL should never have a default password for root and their install should never allow it. Thats just ASKING for a worm.
Then by your logic, Apple makes absolutely the best, since they just posted record earnings, quadrupling them in fact. Did Microsoft quadruple its profits?
The installer now does ask you for a new password. Earlier ones just defaulted to "root." Still, you're right, it shouldn't be allowed, but I think it's common practice, as MSSQL does it too.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.