asked on

mysql vulnerability check

hi

any idea how can i do mysql vulnerability check for my server ?

What do you mean? Are you worried about remote access via port 3306 or injection attacks via PHP?

MySQL account security

http://dev.mysql.com/doc/refman/5.5/en/default-privileges.html and ALWAYS remove the default database 'TEST'

From PHP the main pathway is SQL injection

http://php.net/manual/en/security.database.sql-injection.php

loong

ASKER

hi
thanks for reply

any scanner to check what is mysql vulnerability for this version ?

ASKER CERTIFIED SOLUTION

Beverley Portlock

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

loong

ASKER

found 1 is google

http://www.rapid7.com/resources/free-security-software-downloads/MySQL-vulnerability-scanner-CVE-2012-2122.jsp

but it only scan and check CVE-2012-212..

i want a scanner to check what vulnerebillity.. like wordpress scanner...

tel2

Good points, Ray, but what do you mean by:
> In a forum where the default grade is "A"...
When I close EE questions, it asks me what grade I want to assign, but there is no default.

Thanks.
tel2

Ray Paseur

@tel2: Have a look at the grading guidelines, here:
http://support.experts-exchange.com/customer/portal/articles/481419

tel2

Agreed, Rey.

Just thought you might be trying to say the grade radio buttons defaulted to "A".

Thanks for the clarification.

loong

ASKER

ok understand