Bug #28181 Access denied to 'information_schema when select into out file (regression)
| Submitted: | 1 May 2007 12:50 | Modified: | 10 May 2007 17:42 |
|---|---|---|---|
| Reporter: | Omer Barnir (OCA) | Email Updates: | |
| Status: | Closed | Impact on me: | |
| Category: | MySQL Server: Security: Privileges | Severity: | S2 (Serious) |
| Version: | 5.0.42 | OS: | Any |
| Assigned to: | Sergei Glukhov | CPU Architecture: | Any |
[1 May 2007 12:50]
Omer Barnir
[1 May 2007 12:53]
Omer Barnir
This problem seems to be the same problem reported in bug#13202 and bug#13868 and that was fixed in 5.0.15 and now returned
[1 May 2007 13:03]
Omer Barnir
test file showing the problem
Attachment: bug28181.test (application/octet-stream, text), 693 bytes.
[1 May 2007 13:04]
Omer Barnir
resukt file in 5.0.40
Attachment: bug28181_5040.result (application/octet-stream, text), 549 bytes.
[1 May 2007 13:05]
Omer Barnir
result file in 5.0.42
Attachment: bug28181_5042.result (application/octet-stream, text), 639 bytes.
[3 May 2007 10:24]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/25997 ChangeSet@1.2471, 2007-05-03 15:22:36+05:00, gluh@mysql.com +3 -0 Bug#28181 Access denied to 'information_schema when select into out file (regression) allow select into out file from I_S if user has FILE privilege otherwise issue an error.
[4 May 2007 8:37]
Alexander Barkov
The patch http://lists.mysql.com/commits/25997 looks ok.
[4 May 2007 9:44]
Bugs System
A patch for this bug has been committed. After review, it may be pushed to the relevant source trees for release in the next version. You can access the patch from: http://lists.mysql.com/commits/26077 ChangeSet@1.2471, 2007-05-04 14:41:58+05:00, gluh@mysql.com +3 -0 Bug#28181 Access denied to 'information_schema when select into out file (regression) allow select into out file from I_S if user has FILE privilege otherwise issue an error
[7 May 2007 18:14]
Bugs System
Pushed into 5.1.18-beta
[8 May 2007 0:20]
Paul DuBois
Noted in 5.1.18 changelog. SELECT * INTO OUTFILE ... FROM INFORMATION_SCHEMA.schemata failed with an Access denied error, even for a user who has the FILE privilege. Setting report to Patch Queued pending push into 5.0.x.
[10 May 2007 6:51]
Bugs System
Pushed into 5.0.42
[10 May 2007 17:42]
Paul DuBois
Noted in 5.0.42 changelog.
Portions of this website are copyright © 2001, 2002 The PHP Group
Page generated in 0.069 sec. using MySQL 8.4.7-u6-cloud
Timestamp references displayed by the system are UTC.
Content reproduced on this site is the property of the
respective copyright holders.
It is not reviewed in advance
by Oracle and does not necessarily represent the opinion of
Oracle or any other party.