Bugtraq mailing list archives

Re: msql access control


From: thoth () PURPLEFROG COM (thoth () PURPLEFROG COM)
Date: Mon, 29 Sep 1997 10:19:00 -0400


"John W. Temples" <john () KUWAIT NET> ,in message <Pine.SCO.3.96.970927205737.599
        2C-100000@jwt>, wrote:

2) The other form of authentication used is hostname.  The msql server
does a lookup on the IP address of the client, but does not
subsequently do a lookup of the resulting hostname to verify it.

 nospoof on

--
Bob Forsman                                   thoth () gainesville fl us
           http://www.gainesville.fl.us/~thoth/



Current thread: