[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-Disclosure] mysql password cracking

To: full-disclosure@xxxxxxxxxxxxxxxx
Subject: [Full-Disclosure] mysql password cracking
From: David Hane <dlhtux@xxxxxxxxxxxxx>
Date: Fri, 8 Oct 2004 13:03:41 -0700 (PDT)

I'm wondering how dangerous it is to allow a user on a
mysql db to view the grants for another user. Could
they take the encrypted password data and possibly
crack it? If they can, how easy is it?


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Follow-Ups:
- Re: [Full-Disclosure] mysql password cracking
  - From: Anders Langworthy
- Re: [Full-Disclosure] mysql password cracking
  - From: ppatters

Prev by Date: Re: [Full-Disclosure] Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and criminal.
Next by Date: Re: [Full-Disclosure] Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassing and criminal.
Previous by thread: RE: [Full-Disclosure] Hacking into private files, my credit card purchases, personal correspondence or anything that is mine is trespassin g and criminal.
Next by thread: Re: [Full-Disclosure] mysql password cracking
Index(es):
- Date
- Thread