Re: Security annoucement mailing-list ?

2001-02-26 Thread Nicolas GREGOIRE
> I'd rather see them sent to the MySQL announcements list. It is > already VERY low-traffic, and that seems like appropriate content. > > No sense creating another list just for the VERY occasional > announcements when we already have one [mostly] for that purpose. It seems to be a good idea.

Security annoucement mailing-list ?

2001-02-26 Thread Nicolas GREGOIRE
Hi, is it possible to create (I don't think it already exists) a mailing-list just for security problems about MySQL. I'm very concerned about the security of my web sites, and I rely on MySQL to provide dynamic content. So, for the moment, I must subscribe to the general list and receive tons

Re: mysql -u root WITHOUT password !

2001-02-05 Thread Nicolas GREGOIRE
RENAULT Laurent a écrit : > > I don't have mySQL root password ! > Is the solution do a backup of databases and cleanup mysql install and > re-install it ? If you have Unix root access, you can edit the table where is stored the encrypted password, and put a new one ... You can too re-install

Re: Mysql and security?

2001-02-01 Thread Nicolas GREGOIRE
msquared a écrit : > Perhaps you want to distribute a CD full of databases, and people buy > access to specific databases. access = password IMHO, this method can't protect the content of the CD. Hace a closer look : - you have read acces to the CD (files-level read access), but your MySQL ser

Security issue

2001-01-18 Thread Nicolas GREGOIRE
Hi, Still not any info about the buffer-overflow discovered last week ? Shouldn't be fixed at the beginning of the week ? Please, dear MySQL team, give us info !! Regards, Nicob - Before posting, please check: http://www.my

Re : mysql security issue, overflow

2001-01-15 Thread Nicolas GREGOIRE
Sergei Golubchik a écrit : > > Hi! > > On Jan 12, João Gouveia wrote: > > Hi, > > > > I believe i've found a problem in MySql. Here are some test's i've made in > > 3.22.27 x86( also tested on v3.22.32 - latest stable, although i didn't > > debug it, just tested to see if crashes ). > > Confirm