MySQL privelege escalation

2003-03-0900:00:00

BUGTRAQ

vulners.com

By spoofing datadir/my.cnf with SELECT INTO it's possible to launch MySQL with any account, including root.

CPENameOperatorVersion
mysqleq3.23

CPE	Name	Operator	Version
	mysql	eq	3.23

References

vulners.com/securityvulns/securityvulns:doc:4176