Bugtraq mailing list archives

Re: MySQL DoS ?


From: alan () MANAWATU GEN NZ (Alan Brown)
Date: Sun, 16 Aug 1998 02:13:00 +1200


I sent the message regarding the lockout to a local MySQL guru,
here's his reply:

"This is a documented feature I believe. It is in place to prevent
brute-forcing of passwords (hence the limit of 1,100 and not some strange
2^ number). I may be wrong. If it is this, then the freeze only occurs
against the address doing the sending, all other locations can still
connect correctly."

Can anyone verify this?

Ab



Current thread: