Security Flaw and Privileges
am 11.03.2005 19:04:44 von Luca ErcoliHi,
i've found a security flaw on mysql server for windows,
but i'm not sure that the exploitation is possible in a
real life condition. This bug allows an authenticaded user
to cause the service to fail.
In order to exploit this vulnerability, an user must own
well-defined privileges on *.*.
My question is this:
"is possible that an user own at least one of those privileges on *.*
(for example "GRANT CREATE TEMPORARY TABLES ON *.* TO 'test'@'%';"):
- REFERENCES
- CREATE TEMPORARY TABLES
- GRANT OPTION
- CREATE
- SELECT
"
would be greatfull to get some help,
Luca Ercoli
--
MySQL Windows Mailing List
For list archives: http://lists.mysql.com/win32
To unsubscribe: http://lists.mysql.com/win32?unsub=gcdmw-win32@m.gmane.org