mysql for windows host gcw

[computerguy121]

Hi,

I have installed mysql for windows it's installed and works perfectly however, i was wondering if it was normal to have the following entry mysql.user:

mysql> select Host, User, Password, Select_priv, Insert_priv, Update_priv from u
ser where host='gcw';
+------+------+----------+-------------+-------------+-------------+
| Host | User | Password | Select_priv | Insert_priv | Update_priv |
+------+------+----------+-------------+-------------+-------------+
| gcw | | | N | N | N |
| gcw | root | | Y | Y | Y |
+------+------+----------+-------------+-------------+-------------+
2 rows in set (0.00 sec)

The reason i am worried is due to the hostname gcw being given login privileges in effect allowing anyone with enough time on the local network with this hostname to brute force this account, can this be safly removed without effecting anything. the only reason i am posting is i cant find this referenced in the mysql manual.

Thanks 🆒

[LordShryku]

Well, it doesn't look like you've assigned a password to the root account. That's the only security threat I see. Anyone on gcw can just use the username root and have access. Assign a password to that, and you should be straight. The first entry seems useless since it doesn't have any privledges.