50 ms·
Well, the Ubuntu part came from HD Moore [1]. I haven't been able to confirm it on my Ubuntu 12.04 virtual machine instance though, nor does my virtual machine
by mjschultz 14y ago
Well, the Ubuntu part came from HD Moore [1]. I haven't been able to confirm it on my Ubuntu 12.04 virtual machine instance though, nor does my virtual machine appear to trigger the bug using the CVE-2012-2122 checker [2].
But, that is just my single VM instance and I would assume HD Moore knows what he is doing.
[1] http://pastie.org/private/903voijkkz8nmde3yqj4rw http://pastie.org/private/903voijkkz8nmde3yqj4rw
[2] http://pastie.org/4064638 http://pastie.org/4064638
- zzzzzzzzz 14y agoI can confirm. Ubuntu 12.04 LTS (64 bit).
- Alan01252 14y agoThe C script is returning vulnerable on both my local machine (precise) and my vps (Ubuntu 11.10). However tests of trying to brute force the root password using the mysql one liners in this thread have failed every time. Both machines allow local access only so I assume I'm safe.
- michiel3 14y agoYep, if you're blocking remote hosts to authenticate on 3306 (or any other port you're running mysqld on) you're safe. The attacking host can't authenticate itself, so it's unable to exploit this bug.