I have the following situation: Ona score of weakly secured machines a business critical application is installed. The application uses a MySQL 4 database where all the business critical data are stored.
Each application installation has a configuration file stored in ascii format which can be read and written by anyone who has access to the computer in questions.
The following information is exposed:
My Question is this:
- How much damage, or how big a security loophole, is this for a dedicated attacker?
- How much damage, or how big a security loophole, is this for a mid experienced attacker?
- What types of attacks the database is susceptible to?