Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Νίκος Αλεξόπουλος
Στις 2/10/2013 8:39 μμ, ο/η Steven D'Aprano έγραψε: On Wed, 02 Oct 2013 16:41:40 +0300, Νίκος wrote: Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: Is it possible for someone that knows the MYSQL password of a server to run arbitrary code

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Ethan Furman
On 10/02/2013 07:46 AM, Νίκος wrote: Στις 2/10/2013 4:58 μμ, ο/η Ned Batchelder έγραψε: As others have said in this thread, this is not a Python topic. Find another forum for this question. Do not ask it here again. You've said that you can improve. Show us by not asking non-Python questions

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Steven D'Aprano
On Wed, 02 Oct 2013 16:41:40 +0300, Νίκος wrote: > Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: >> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: >> >>> Is it possible for someone that knows the MYSQL password of a server >>> to run arbitrary code on a linux server? >> >> Yes, it is possi

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Νίκος Ακεξόπουλος
Στις 2/10/2013 6:13 μμ, ο/η Ravi Sahni έγραψε: On Wed, Oct 2, 2013 at 8:04 PM, Alister wrote: On Wed, 02 Oct 2013 16:41:40 +0300, Νίκος wrote: Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: Is it possible for someone that knows the MYSQ

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Ravi Sahni
On Wed, Oct 2, 2013 at 8:04 PM, Alister wrote: > On Wed, 02 Oct 2013 16:41:40 +0300, Νίκος wrote: > >> Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: >>> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: >>> Is it possible for someone that knows the MYSQL password of a server to run

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Denis McMahon
On Wed, 02 Oct 2013 17:46:08 +0300, Νίκος wrote: > But i need to know what happened and how this .html file got uploaded. The html file started out in an editor on on another machine, and was created by someone typing at the keyboard. It was then saved to hard disk as a file. The other machine

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Ned Batchelder
On 10/2/13 10:46 AM, Νίκος wrote: Στις 2/10/2013 4:58 μμ, ο/η Ned Batchelder έγραψε: On 10/2/13 9:41 AM, Νίκος wrote: Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: Is it possible for someone that knows the MYSQL password of a server to

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread ishish
Am 02.10.2013 15:46, schrieb Νίκος: But i need to know what happened and how this .html file got uploaded. This is not a python question, but this happened from this pythons NG. ... ... Who says that?? -- https://mail.python.org/mailman/listinfo/python-list

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Alister
On Wed, 02 Oct 2013 16:41:40 +0300, Νίκος wrote: > Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: >> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: >> >>> Is it possible for someone that knows the MYSQL password of a server >>> to run arbitrary code on a linux server? >> >> Yes, it is possi

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Νίκος
Στις 2/10/2013 4:58 μμ, ο/η Ned Batchelder έγραψε: On 10/2/13 9:41 AM, Νίκος wrote: Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: Is it possible for someone that knows the MYSQL password of a server to run arbitrary code on a linux server

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Ned Batchelder
On 10/2/13 9:41 AM, Νίκος wrote: Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: Is it possible for someone that knows the MYSQL password of a server to run arbitrary code on a linux server? Yes, it is possible. Is that what might have h

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Νίκος
Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε: On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: Is it possible for someone that knows the MYSQL password of a server to run arbitrary code on a linux server? Yes, it is possible. Is that what might have happened and someone managed to upl

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Steven D'Aprano
On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote: > Is it possible for someone that knows the MYSQL password of a server to > run arbitrary code on a linux server? Yes, it is possible. > Okey he uses the password and he gain access to the databases, then > what? MySQL is a database server how can

Re: Killing threads with TB (was: Can arbitrary code run in a server if someone's know just the MySQL password?)

2013-10-02 Thread Tim Chase
On 2013-10-02 05:38, feedthetr...@gmx.de wrote: > (Hey Thunderbird has a very useful new feature. Ignore thread.) Unfortunately, as of when I last tested it, it only works in the newsgroup part of TB, not the mail portion of TB. Sadly, Claws-Mail (my current mailer) doesn't have a native kill-thr

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread feedthetroll
Am Mittwoch, 2. Oktober 2013 14:20:00 UTC+2 schrieb Ferrous Cranus: > ... > Is it possible for someone that knows the MYSQL password of a server to > run arbitrary code on a linux server? > ... > If yes, can you give an example please? http://lmgtfy.com/?q=mysql+shell+escape > Please, serious rep

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Antoon Pardon
Op 02-10-13 14:20, Νίκος schreef: > Tim delaney said: > > "Because there's no chance with the brilliance you display that there > could be any possibility of login details being kept in plaintext in > your database. > > And of course your database is so well locked down that no attacker with > a

Can arbitrary code run in a server if someone's know just the MySQL password?

2013-10-02 Thread Νίκος
Tim delaney said: "Because there's no chance with the brilliance you display that there could be any possibility of login details being kept in plaintext in your database. And of course your database is so well locked down that no attacker with a login to it could then execute arbitrary code