• Plesk Uservoice will be deprecated by October. Moving forward, all product feature requests and improvement suggestions will be managed through our new platform Plesk Productboard.
    To continue sharing your ideas and feedback, please visit features.plesk.com

Critical Security Bug in Plesk for Windows 7.5.6

H

hipernet

Guest
Critical Security Bug in Plesk for Windows 7.5.6 - SOLVED

Anybody has tried to connect to the mysql instance what listen in port 8306?

OK, try it from any machine around the world, you can connect without password as the user admin, you can do DROP DATABASE psa if you want it.

Can be mysql for windows compiled with skip-grant-tables enabled?

This is terrible, horrible, and i hope you solve this today.


Last patch solve this.
Thanks for all.
 
laptop ~ # mysql -u admin -h xxxxxx.com -P 8306
ERROR 1130 (00000): #HY000Host 'blxxxxxxxx.dsl.telepac.pt' is not allowed to connect to this MySQL server
 
What version and revision of Plesk for Windows you have?

[root@XXX ~]# mysql -h XXXXXXXXX -P 8306 -u admin
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 11932 to server version: 4.1.12-nt

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql>


anymore?
 
Back
Top