4 messages in com.mysql.lists.packagersRe: [packagers] [bugsman@libero.it: [...
FromSent OnAttachments
Christian Hammers09 Mar 2003 07:47 
Christian Hammers09 Mar 2003 09:10 
Dmitry V. Levin09 Mar 2003 10:12 
Dmitry V. Levin09 Mar 2003 10:16 
Subject:Re: [packagers] [bugsman@libero.it: [bugtraq] MySQL user can be changed to root]
From:Dmitry V. Levin (ld@office.altlinux.org)
Date:03/09/2003 10:16:27 AM
List:com.mysql.lists.packagers

On Sun, Mar 09, 2003 at 06:10:40PM +0100, Christian Hammers wrote:

IMHO putting outfiles in DATADIR should be prohibited by default. (what about "--allow-outfile-to-datadir"?)

This will stop only this kind of attack and is thus of little help.

-- ldv