Can arbitrary code run in a server if someone's know just the MySQL password?

Steven D'Aprano steve+comp.lang.python at pearwood.info
Wed Oct 2 13:39:00 EDT 2013


On Wed, 02 Oct 2013 16:41:40 +0300, Νίκος wrote:

> Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε:
>> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
>>
>>> Is it possible for someone that knows the MYSQL password of a server
>>> to run arbitrary code on a linux server?
>>
>> Yes, it is possible.
> 
> Is that what might have happened and someone managed to upload the .html
> file in '~/home/nikos/www/' ?

How the hell should I know? I am not a MySQL expert, and this is not a 
MySQL forum.

Nikos, you embarrass me. I have gone out on a limb for you, and this is 
how you thank me? You said you were improving, and yet here you go 
completely ignoring the links I sent you, and continuing to ask off-topic 
questions here.

Thanks for kicking me in the guts. I will remember this next time you ask 
a question.


-- 
Steven



More information about the Python-list mailing list