Re: load data local ... security issue

2002-02-06 Thread David Phillips
But you could already read any file that the web server can read, if you can execute scripts which are run as the webserver. Only way to prevent that is suEXEC. How is this specific to MySQL? 1) Webserver must be able to read HTML files of every WebUsers 2) MySQL functions are called with

what is the security issue with dynamic format?

2001-10-02 Thread denis mercier
hi I am presently going over the mysql documentation to get familiar with it, It runs great on my development server (linux RH7.1 kernel=2.4.2-2 resin application server), I am in the process of optimizing and testing , I am using blob datatype in my main table, I understand why a fixed-size

Re: SECURITY issue in remote tcp/ip connecting?

2001-01-20 Thread Tõnu Samuel
Derek Sivers wrote: Any measures I could take (like SSH) to encrypt the transaction? Use CIPE tunnel. You can find it: http://sites.inka.de/sites/bigred/devel/cipe.html Is this anything like ipsec? http://www.openbsd.org/faq/faq13.html (I'm using OpenBSD.) Or, rather, could I use

Security issue

2001-01-18 Thread Nicolas GREGOIRE
Hi, Still not any info about the buffer-overflow discovered last week ? Shouldn't be fixed at the beginning of the week ? Please, dear MySQL team, give us info !! Regards, Nicob - Before posting, please check:

Re: Security issue

2001-01-18 Thread Sergei Golubchik
Hi! On Jan 18, Nicolas GREGOIRE wrote: Hi, Still not any info about the buffer-overflow discovered last week ? Shouldn't be fixed at the beginning of the week ? Please, dear MySQL team, give us info !! Regards, Nicob Fixed in latest release (3.23.31). Regards, Sergei -- MySQL

Re : mysql security issue, overflow

2001-01-15 Thread Nicolas GREGOIRE
Sergei Golubchik a crit : Hi! On Jan 12, Joo Gouveia wrote: Hi, I believe i've found a problem in MySql. Here are some test's i've made in 3.22.27 x86( also tested on v3.22.32 - latest stable, although i didn't debug it, just tested to see if crashes ). Confirmed up to latest

Re: mysql security issue

2001-01-15 Thread Sergei Golubchik
Hi! On Jan 15, Nicolas GREGOIRE wrote: Sergei Golubchik a Ucrit : Hi! On Jan 12, JoUo Gouveia wrote: Hi, I believe i've found a problem in MySql. Here are some test's i've made in 3.22.27 x86( also tested on v3.22.32 - latest stable, although i didn't debug it, just