1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Critical Security Bug in Plesk for Windows 7.5.6

Discussion in 'Plesk for Windows - 8.x and Older' started by hipernet, Mar 22, 2006.

  1. hipernet

    hipernet Guest

    0
     
    Critical Security Bug in Plesk for Windows 7.5.6 - SOLVED

    Anybody has tried to connect to the mysql instance what listen in port 8306?

    OK, try it from any machine around the world, you can connect without password as the user admin, you can do DROP DATABASE psa if you want it.

    Can be mysql for windows compiled with skip-grant-tables enabled?

    This is terrible, horrible, and i hope you solve this today.


    Last patch solve this.
    Thanks for all.
     
  2. prosys

    prosys Guest

    0
     
    laptop ~ # mysql -u admin -h xxxxxx.com -P 8306
    ERROR 1130 (00000): #HY000Host 'blxxxxxxxx.dsl.telepac.pt' is not allowed to connect to this MySQL server
     
  3. hipernet

    hipernet Guest

    0
     
    What version and revision of Plesk for Windows you have?

    [root@XXX ~]# mysql -h XXXXXXXXX -P 8306 -u admin
    Welcome to the MySQL monitor. Commands end with ; or \g.
    Your MySQL connection id is 11932 to server version: 4.1.12-nt

    Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

    mysql>


    anymore?
     
  4. hipernet

    hipernet Guest

    0
     
    Last patch solve this.
    Thanks for all.
     
Loading...