Re: MySQL Security Flaw - Dropped Databases

2002-12-24 Thread Lenz Grimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, On Thu, 19 Dec 2002, Michael Widenius wrote: > With 'DROP DATABASE database_name'. > Through the depricated client function 'mysql_drop_db()'. > > The first case works correct but in the second case the grant check > is not done. I tracked this

MySQL Security Flaw - Dropped Databases

2002-12-19 Thread Michael Widenius
Hi! Mark> Hi, Gary> I'd like to add to the "security flaw" thread with my own experience. Gary> I have been hosting MySQL databases for over 2 years and on a few occasions Gary> have had user databases disappear. Gary> Last month one of my admin databases was dropped. The only user

Re: MySQL Security Flaw - Dropped Databases

2002-12-18 Thread Lenz Grimmer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, thanks for your message. On Wed, 18 Dec 2002, Gary Huntress wrote: > I'd like to add to the "security flaw" thread with my own experience. I > have been hosting MySQL databases for over 2 years and on a few > occasions have had user databases di

MySQL Security Flaw - Dropped Databases

2002-12-18 Thread Gary Huntress
Hi, I'd like to add to the "security flaw" thread with my own experience. I have been hosting MySQL databases for over 2 years and on a few occasions have had user databases disappear. Last month one of my admin databases was dropped. The only user who has access to that database is root