Full Disclosure mailing list archives

mysql password cracking


From: David Hane <dlhtux () sbcglobal net>
Date: Fri, 8 Oct 2004 13:03:41 -0700 (PDT)

I'm wondering how dangerous it is to allow a user on a
mysql db to view the grants for another user. Could
they take the encrypted password data and possibly
crack it? If they can, how easy is it?


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: