Archive of UserLand's first discussion group, started October 5, 1998.
Re: Walking around amsterdam
Author: Eric Soroos Posted: 5/16/2000; 8:41:11 AM Topic: Walking around amsterdam Msg #: 17340 (In response to 17335) Prev/Next: 17339 / 17341
I got the impression that BugZilla was using MySQL was running with *its* root account, not that MySQL was running-as-the-server-root.From http://www.dataloss.net/papers/how.defaced.apache.org.txt
/* * Mysql */ After a long search we found out that mysql was running as user root and was reachable locally. Because apache.org was running bugzilla which requires a mysql account and has it username/password plaintext in the bugzilla source it was easy to get a username/passwd for the mysql database.eric
This page was archived on 6/13/2001; 4:55:12 PM.
© Copyright 1998-2001 UserLand Software, Inc.