I recently stumbled onto the ability to log into a mysql server from the command line 
with any table name, and a blank password.  ie:
mysql -u mysql
My root account has a password set, and a few users with limited access but I haven't 
done much else as far security goes.
I've tried this on a 3.23 and 4.0 mysql server running on RedHat and FreeBSD.
Is there a setting I need to change to stop this?

Thanks in advance, 
Dan Ullom

Reply via email to