Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #55341

Re: Can arbitrary code run in a server if someone's know just the MySQL password?

Path csiph.com!usenet.pasdenom.info!weretis.net!feeder1.news.weretis.net!feeder.erje.net!eu.feeder.erje.net!xlned.com!feeder7.xlned.com!newsfeed.xs4all.nl!newsfeed3.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path <nedbat@gmail.com>
X-Original-To python-list@python.org
Delivered-To python-list@mail.python.org
X-Spam-Status OK 0.016
X-Spam-Evidence '*H*': 0.97; '*S*': 0.00; 'subject:password': 0.05; 'subject:code': 0.07; 'cc:addr:python-list': 0.11; 'python': 0.11; 'question.': 0.14; '4:25': 0.16; 'non-python': 0.16; 'received:209.85.161.174': 0.16; 'subject: \n ': 0.16; 'subject:run': 0.16; 'thread,': 0.16; 'sender:addr:gmail.com': 0.17; 'wrote:': 0.18; 'wed,': 0.18; '>>>': 0.22; 'cc:addr:python.org': 0.22; 'header:User-Agent:1': 0.23; 'cc:2**0': 0.24; 'cc:no real name:2**0': 0.24; 'asking': 0.27; 'header:In-Reply-To:1': 0.27; 'am,': 0.29; 'code': 0.31; "skip:' 10": 0.31; "d'aprano": 0.31; 'steven': 0.31; 'way?': 0.31; 'file': 0.32; 'run': 0.32; 'another': 0.32; 'linux': 0.33; 'subject:the': 0.34; 'received:209.85': 0.35; 'knows': 0.35; 'possible.': 0.35; 'received:google.com': 0.35; 'possible': 0.36; 'subject:?': 0.36; 'received:209': 0.37; 'server': 0.38; 'subject:Can': 0.60; 'forum': 0.61; "you've": 0.63; 'show': 0.63; 'to:addr:gmail.com': 0.65; 'here': 0.66; '8bit%:92': 0.71; 'subject:know': 0.84; '2013': 0.98
DKIM-Signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=qicPj7VxuwZ7UdyQnglbH4tAEb1Jm5NuthgbPHusEMc=; b=HjxJUxf0y0QsWpANb6bqQgrBv/4jNcjJ5WiTqiB/LfxBUmgJcn0b8wqupvgdb05ydF a9FVEKoaSROG3tMvPqWdge3xiTrp0YgAykf8t/bbqre1SXO95wZ1IGCt27WOC2QpwcR2 x6nySk0T594rLQgKHBkNDRqCO7zVXiKTxgoV6okFFs+KtmFC0+J6Oqq1ITHaARpXHvQh 8vrD3bjztlrR3ppGsg8CQ9N6kX+vnYkpy5ta0a7RpXlHcgpbvH7qKI4qOXUR6Wz/GgRm xe6yXcBHaPeIDoKf7ATPvg64Rf1MtA09fJfgedR5uG+McQGK/lsqLdmjj4zQVdeloupg eN+A==
X-Received by 10.236.198.45 with SMTP id u33mr2059928yhn.37.1380722299962; Wed, 02 Oct 2013 06:58:19 -0700 (PDT)
Sender Ned Batchelder <nedbat@gmail.com>
Date Wed, 02 Oct 2013 09:58:17 -0400
From Ned Batchelder <ned@nedbatchelder.com>
User-Agent Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version 1.0
To Νίκος <nikos.gr33k@gmail.com>
Subject Re: Can arbitrary code run in a server if someone's know just the MySQL password?
References <l2h31g$q96$1@dont-email.me> <524c1ee6$0$29984$c3e8da3$5496439d@news.astraweb.com> <l2h7qj$gqt$2@dont-email.me>
In-Reply-To <l2h7qj$gqt$2@dont-email.me>
Content-Type text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding 8bit
Cc python-list@python.org
X-BeenThere python-list@python.org
X-Mailman-Version 2.1.15
Precedence list
List-Id General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive <http://mail.python.org/pipermail/python-list/>
List-Post <mailto:python-list@python.org>
List-Help <mailto:python-list-request@python.org?subject=help>
List-Subscribe <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups comp.lang.python
Message-ID <mailman.629.1380722323.18130.python-list@python.org> (permalink)
Lines 22
NNTP-Posting-Host 2001:888:2000:d::a6
X-Trace 1380722323 news.xs4all.nl 15940 [2001:888:2000:d::a6]:43112
X-Complaints-To abuse@xs4all.nl
Xref csiph.com comp.lang.python:55341

Show key headers only | View raw

On 10/2/13 9:41 AM, Νίκος wrote:
> Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε:
>> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
>>
>>> Is it possible for someone that knows the MYSQL password of a server to
>>> run arbitrary code on a linux server?
>>
>> Yes, it is possible.
>
> Is that what might have happened and someone managed to upload the 
> .html file in '~/home/nikos/www/' ?
>
> Can you think of any other way?
>

As others have said in this thread, this is not a Python topic. Find 
another forum for this question.  Do not ask it here again.

You've said that you can improve.  Show us by not asking non-Python 
questions here.

--Ned.

Back to comp.lang.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Can arbitrary code run in a server if someone's know just the MySQL password? Νίκος <nikos.gr33k@gmail.com> - 2013-10-02 15:20 +0300
  Re: Can arbitrary code run in a server if someone's know just the MySQL password? Antoon Pardon <antoon.pardon@rece.vub.ac.be> - 2013-10-02 14:37 +0200
  Re: Can arbitrary code run in a server if someone's know just the MySQL password? feedthetroll@gmx.de - 2013-10-02 05:38 -0700
    Re: Killing threads with TB (was: Can arbitrary code run in a server if someone's know just the MySQL password?) Tim Chase <python.list@tim.thechases.com> - 2013-10-02 08:21 -0500
    Re: Killing threads with TB Terry Reedy <tjreedy@udel.edu> - 2013-10-02 18:34 -0400
    Re: Killing threads with TB Mark Lawrence <breamoreboy@yahoo.co.uk> - 2013-10-02 23:48 +0100
  Re: Can arbitrary code run in a server if someone's know just the MySQL password? Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2013-10-02 13:25 +0000
    Re: Can arbitrary code run in a server if someone's know just the MySQL password? Νίκος <nikos.gr33k@gmail.com> - 2013-10-02 16:41 +0300
      Re: Can arbitrary code run in a server if someone's know just the MySQL password? Ned Batchelder <ned@nedbatchelder.com> - 2013-10-02 09:58 -0400
        Re: Can arbitrary code run in a server if someone's know just the MySQL password? Νίκος <nikos.gr33k@gmail.com> - 2013-10-02 17:46 +0300
          Re: Can arbitrary code run in a server if someone's know just the MySQL password? ishish <ishish@domhain.de> - 2013-10-02 15:55 +0100
          Re: Can arbitrary code run in a server if someone's know just the MySQL password? Ned Batchelder <ned@nedbatchelder.com> - 2013-10-02 11:15 -0400
          Re: Can arbitrary code run in a server if someone's know just the MySQL password? Denis McMahon <denismfmcmahon@gmail.com> - 2013-10-02 16:02 +0000
          Re: Can arbitrary code run in a server if someone's know just the MySQL password? Ethan Furman <ethan@stoneleaf.us> - 2013-10-02 09:59 -0700
      Re: Can arbitrary code run in a server if someone's know just the MySQL password? Alister <alister.ware@ntlworld.com> - 2013-10-02 14:34 +0000
        Re: Can arbitrary code run in a server if someone's know just the MySQL password? Ravi Sahni <ganeshsahni07@gmail.com> - 2013-10-02 20:43 +0530
          Re: Can arbitrary code run in a server if someone's know just the MySQL password? Νίκος Ακεξόπουλος <nikos.gr33k@gmail.com> - 2013-10-02 20:06 +0300
      Re: Can arbitrary code run in a server if someone's know just the MySQL password? Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2013-10-02 17:39 +0000
        Re: Can arbitrary code run in a server if someone's know just the MySQL password? Νίκος Αλεξόπουλος <nikos.gr33k@gmail.com> - 2013-10-02 21:02 +0300
  Re: Can arbitrary code run in a server if someone's know just the MySQL password? Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2013-10-02 20:02 -0400
  Re: Can arbitrary code run in a server if someone's know just the MySQL password? Tony the Tiger <tony@tiger.invalid> - 2013-10-04 15:19 -0500

csiph-web