Security Advisor

MySQL Databases Let Loose User Passwords

In this edition's "Password Breach of the Week" story, news recently surfaced that an attacker could gain access to MySQL databases thanks to a flaw that will verify an incorrect password as correct.

While the flaw isn't found in all systems (and those running MySQL and its brother MariaDB databases on Windows are safe), this open door could give hackers access to all your info stored using the SQL language.

According to folks in the MariaDB camp, this flaw has the probability of popping up once in every 256 attempts. While those aren't the type of odds you would lay money down on in Vegas, know that an attacker could easily submit a password hundreds of times in a second. That's as close to a sure thing you're going to get in the world of cyber crime.

As with most security vulnerabilities, this bug can be easily avoided with patching your software to the latest version.

About the Author

Chris Paoli is the site producer for Redmondmag.com and MCPmag.com.

Featured

  • Black Sky White Cloud Graphic

    Microsoft Expands Cloud Programs for Specific Industries

    Microsoft on Wednesday described an expansion of its industry-specific cloud efforts by announcing three new program additions, centered on the needs of finance, manufacturing and nonprofit organizations.

  • Reusing Content Within Microsoft Word

    A new Microsoft Word feature lets you insert a block of text (or other content) from a different file without leaving the document you're currently working on.

  • Replacement SSDs Now Available for Surface Pro 7+ PCs

    Microsoft on Tuesday announced that sales of solid-state drive (SSD) "commercial spares" replacement kits for Surface Pro 7+ PCs is now open, but only in the U.S. market.

  • Azure AD My Apps Collections and Risk Detections Commercially Released

    Microsoft on Friday announced a couple of new commercially released Azure Active Directory features, namely My Apps "collections" and new "risk detections" capabilities.

comments powered by Disqus