Security Vulnerability in MySQL

[mmix]

http://blog.sucuri.net/2012/06/secur...-in-mysql.html

If you are running MySQL, make sure to patch it now! Even better, make sure that MySQL is not wide open to the internet and only listening locally. The following iptables rule helps to block remote access to it:

/sbin/iptables -A INPUT -p tcp –dport 3306 -j DROP

You can also change your my.cnf to only bind to local address, minimizing the effect of the vulnerability:

bind-address=127.0.0.1

If you also have PHPMyAdmin open, it could be used to leverage this vulnerability (even though we were not able to confirm).

[Dutchy]

This one is really bad, except when you tend to forget the password to your database a lot. ;p
No seriously, let's hope that the many databases, which store personal data like medical information and stuff like that, all have active and capable administrators.