Re: [Full-Disclosure] User bypass privs for Mysql??

[James Bliss <james.bliss@xxxxxxxxxxx>]

What were your other privileges.  If you did not have any grants then why 
in the heck did you have any access rights to the mysql database (not 
product) tables?  Seems that you had a DBA error, not a product error.

Jim

On Tuesday 18 May 2004 9:02 am, Esler, Joel - Contractor wrote:
> Not having any grant permissions.  I went into the mysql/user table and
> edited the Grant from N to Y.  Logged out and logged back in, and I had
> full privs including Grant.  I shouldn't be able to do this...
>
> Joel
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html