[tlug] CentOS using default/blank? password postgres

["Hung Nguyen Vu" <vuhung16plus+shape@example.com>]

Hi,

My friend's CentOS 5.2 got hit by a scan and the bad guy was in.

postgres pts/1        Wed Aug 20 08:45 - 08:54  (00:08)     host20-31-dynamic.52-82-r.retail.telecomitalia.it
postgres pts/1        Wed Aug 20 08:17 - 08:40  (00:23)     121.14.139.26

I am not sure if CentOS mentions this issue at any point but at least, during the installation of postgres,
he was not informed that he had to change the password of  user postgres.

yum -y install postgresql-server

--
Best Regards,
Nguyen Hung Vu ( Nguyễn Vũ Hưng )
vuhung16plus{remove}@example.com , YIM: vuhung16 , Skype: vuhung16dg
Japan through an eye of a gaijin:
http://www.flickr.com/photos/vuhung/tags/fav/