Oracle paltry patch opens MySQL man-in-the-middle diddle

Adam Goodman of Duo Security has found a vulnerability in the 'vast majority' of Oracle MySQL databases that allows SSL to be stripped, exposing sensitive data to man-in-the-middle attackers. Goodman says Oracle attempted to sling a patch at the problem last year but did so only for some versions and further borked the effort …

[Anonymous Coward]

Ouch…

Still, doesn't affect me or any systems I look after. If someone can snoop on my communications on the lo device to ::1 then I have other problems!