Can arbitrary code run in a server if someone's know just the MySQL password?

Νίκος Αλεξόπουλος nikos.gr33k at gmail.com
Wed Oct 2 14:02:40 EDT 2013


Στις 2/10/2013 8:39 μμ, ο/η Steven D'Aprano έγραψε:
> On Wed, 02 Oct 2013 16:41:40 +0300, Νίκος wrote:
>
>> Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε:
>>> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
>>>
>>>> Is it possible for someone that knows the MYSQL password of a server
>>>> to run arbitrary code on a linux server?
>>>
>>> Yes, it is possible.
>>
>> Is that what might have happened and someone managed to upload the .html
>> file in '~/home/nikos/www/' ?
>
> How the hell should I know? I am not a MySQL expert, and this is not a
> MySQL forum.
>
> Nikos, you embarrass me. I have gone out on a limb for you, and this is
> how you thank me? You said you were improving, and yet here you go
> completely ignoring the links I sent you, and continuing to ask off-topic
> questions here.
>
> Thanks for kicking me in the guts. I will remember this next time you ask
> a question.
>
>
I just asked your opinion at this.
But i okey i will stop since this is not going us anywhere.

Neither will i replay to any more insulting comments.

-- 
What is now proved was at first only imagined! & WebHost
<http://superhost.gr>



More information about the Python-list mailing list