MySQL Worm Hits Windows Machines - Dean Wilson@UnixDaemon: In search of (a) life

Thu, 27 Jan 2005

MySQL Worm Hits Windows Machines
You know you've hit the big time when you get your own worm! The MySpool worm is turning badly configured MySQL installations (on Windows) into zombies in a huge bot net. Now I'm not even going to ask why so many people have MySQL installations listening to the network (Debian disables this by default so bonus points to them) but it is depressing. To stop it doing this just add "skip-networking" to the [mysqld] section of the config file.

I think it's about time someone wrote a MySQL vulnerability scanner to pick up weak passwords, unprotected accounts and similar. Judging by the number of machines out there that are being broken into by this thing there is a market...

For more technical coverage of the problem have a look at SecuiTeam's MySQL UDF Dynamic Library Exploit.

Like this post? - Digg Me! | Add to del.icio.us! | reddit this!

Posted: 2005/01/27 23:07 | /security | Permanent link to this entry | This entry and same date

July 2011	1
June 2011	2
May 2011	3
April 2011	2
March 2011	7
January 2011	1
December 2010	3
November 2010	3
August 2010	1
July 2010	1
June 2010	4
May 2010	2
April 2010	1
March 2010	8
February 2010	1
January 2010	2
Full Archives