Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




bugtraq logo Bugtraq mailing list archives

Re: [luca.ercoli () inwind it: DoS against mysqld]
From: bda <bda () mirrorshades net>
Date: Fri, 23 Aug 2002 12:14:18 -0400

On Fri, Aug 23, 2002 at 06:10:57PM +0200, Simone Piunno wrote:

luca.ercoli () inwind it wrote:

Sorry but this is not a DoS against mysqld, 
this is a DoS against yourself!

Only connections coming from the offending IP address are blocked,
and I can't see anything wrong in this.

If you're running a shell service of any sort, it's possible that a
local user could "DoS" the MySQL server, and interrupt service for
everyone else.

Of course, that user would then be removed, but it's still a hassle. :-)

However, I agree that blocking the address is the correct behavior. Does
MySQL have a configuration option with which to extempt specific hosts
from being ignored?
-- 
bda
...
she.never.really.belonged.to.me
http://mirrorshades.org


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]