Projects/mysqladm-rs
Projects/mysqladm-rs
12
2
Fork 0
Code Issues 36 Pull Requests Actions Releases Activity

Drop privileges before opening $EDITOR #47

New Issue
Closed
opened 2024-08-08 22:35:36 +02:00 by oysteikt · 0 comments
oysteikt commented 2024-08-08 22:35:36 +02:00
Owner
Copy Link

Privilege escalation possible just by tweaking some envvars

This was discovered in mysql-admutils 12 years ago: dc6b93166b..22615506bf

Privilege escalation possible just by tweaking some envvars This was discovered in mysql-admutils 12 years ago: https://git.pvv.ntnu.no/Projects/mysql-admutils/compare/dc6b93166bbd68bd55f838cf10718722cbc4ac39..22615506bfe79c709b136b19d63d85bb972c94ac
oysteikt added this to the Initial release milestone 2024-08-08 22:35:36 +02:00
oysteikt added the
bug
security
 labels 2024-08-08 22:35:36 +02:00
oysteikt added the
big
 label 2024-08-09 09:00:05 +02:00
oysteikt self-assigned this 2024-08-09 16:27:09 +02:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
  
art

The issue needs someone to be creative

  
big

No, not bug, **big** - this is gonna take a while

  
blocked

This issue/PR depends on one or more other issues/PRs

  
bug

Something is not working, and it's not the shield hero

  
ci-cd

Continuous integrals and continuous derivation

  
crash report

Report an oopsie

  
disputed

Kranglefanter

  
documentation

Documentation changes required

  
duplicate

This issue or pull request already exists

  
feature request

New feature

  
good first issue

Get your hands dirty with a new project here

  
packaging

Relates to distribution of the software

  
question

More information is needed

  
security

Skommel

  
techdebt spring cleaning

The code is smelly 👃

  
testing

Poke it and see if it explodes

  
wontfix

This won't be fixed

No Label
art
big
blocked
bug
ci-cd
crash report
disputed
documentation
duplicate
feature request
good first issue
packaging
question
security
techdebt spring cleaning
testing
wontfix
Milestone
Clear milestone
No items
No Milestone
Initial release
Assignees
Clear assignees
No Assignees
oysteikt
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Projects/mysqladm-rs#47
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?