SET PASSWORD broken in 4.0.12 (-Max) - Michael Loftis - com.mysql.lists.bugs

13 messages in com.mysql.lists.bugsSET PASSWORD broken in 4.0.12 (-Max)

From	Sent On	Attachments
Michael Loftis	20 Apr 2003 13:19
Alexander Keremidarski	20 Apr 2003 16:27
Michael Loftis	20 Apr 2003 16:37
Alexander Keremidarski	20 Apr 2003 16:51
Michael Loftis	20 Apr 2003 18:58
Michael Loftis	20 Apr 2003 23:27
Sinisa Milivojevic	21 Apr 2003 04:56
Michael Loftis	21 Apr 2003 11:14
Michael Loftis	21 Apr 2003 11:32
Sinisa Milivojevic	21 Apr 2003 12:16
Michael Loftis	21 Apr 2003 12:50
Michael Loftis	21 Apr 2003 16:12
Sinisa Milivojevic	22 Apr 2003 04:04

Subject:	SET PASSWORD broken in 4.0.12 (-Max)
From:	Michael Loftis (mlof...@modwest.com)
Date:	04/20/2003 01:19:06 PM
List:	com.mysql.lists.bugs

SET PASSWORD is badly broken. Users can no longer change their own password thus:

root@abc:~# mysql -h dbserver -u mloftis -p mloftis Enter password: Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 575149 to server version: 4.0.12-Max-log

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> set password = password('somenewpassword'); ERROR 1044: Access denied for user: 'mlof...@216.xxx.xxx.xxx' to database 'mysql' mysql> \q Bye root@abc:~#

Any idea when/where/how this is broken? Soem new priv that must be granted or what? I'm not about to give users much/any normal access to the mysql database (they don't need it!!!)

TIA