Lucene search

K
freebsdFreeBSD01C231CD-4393-11D9-8BB9-00065BE4B5B6
HistoryMar 29, 2004 - 12:00 a.m.

mysql -- GRANT access restriction problem

2004-03-2900:00:00
vuxml.freebsd.org
15

0.001 Low

EPSS

Percentile

28.0%

When a user is granted access to a database with a name containing
an underscore and the underscore is not escaped then that user might
also be able to access other, similarly named, databases on the
affected system.
The problem is that the underscore is seen as a wildcard by MySQL
and therefore it is possible that an admin might accidently GRANT a
user access to multiple databases.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmysql-server<= 3.23.58_3UNKNOWN

0.001 Low

EPSS

Percentile

28.0%

Related for 01C231CD-4393-11D9-8BB9-00065BE4B5B6