Path: csiph.com!usenet.pasdenom.info!weretis.net!feeder1.news.weretis.net!feeder.erje.net!eu.feeder.erje.net!xlned.com!feeder7.xlned.com!newsfeed.xs4all.nl!newsfeed3.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail
Return-Path: <nedbat@gmail.com>
X-Original-To: python-list@python.org
Delivered-To: python-list@mail.python.org
X-Spam-Status: OK 0.016
X-Spam-Evidence: '*H*': 0.97; '*S*': 0.00; 'subject:password': 0.05; 'subject:code': 0.07; 'cc:addr:python-list': 0.11; 'python': 0.11; 'question.': 0.14; '4:25': 0.16; 'non-python': 0.16; 'received:209.85.161.174': 0.16; 'subject: \n ': 0.16; 'subject:run': 0.16; 'thread,': 0.16; 'sender:addr:gmail.com': 0.17; 'wrote:': 0.18; 'wed,': 0.18; '>>>': 0.22; 'cc:addr:python.org': 0.22; 'header:User-Agent:1': 0.23; 'cc:2**0': 0.24; 'cc:no real name:2**0': 0.24; 'asking': 0.27; 'header:In-Reply-To:1': 0.27; 'am,': 0.29; 'code': 0.31; "skip:' 10": 0.31; "d'aprano": 0.31; 'steven': 0.31; 'way?': 0.31; 'file': 0.32; 'run': 0.32; 'another': 0.32; 'linux': 0.33; 'subject:the': 0.34; 'received:209.85': 0.35; 'knows': 0.35; 'possible.': 0.35; 'received:google.com': 0.35; 'possible': 0.36; 'subject:?': 0.36; 'received:209': 0.37; 'server': 0.38; 'subject:Can': 0.60; 'forum': 0.61; "you've": 0.63; 'show': 0.63; 'to:addr:gmail.com': 0.65; 'here': 0.66; '8bit%:92': 0.71; 'subject:know': 0.84; '2013': 0.98
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=qicPj7VxuwZ7UdyQnglbH4tAEb1Jm5NuthgbPHusEMc=; b=HjxJUxf0y0QsWpANb6bqQgrBv/4jNcjJ5WiTqiB/LfxBUmgJcn0b8wqupvgdb05ydF a9FVEKoaSROG3tMvPqWdge3xiTrp0YgAykf8t/bbqre1SXO95wZ1IGCt27WOC2QpwcR2 x6nySk0T594rLQgKHBkNDRqCO7zVXiKTxgoV6okFFs+KtmFC0+J6Oqq1ITHaARpXHvQh 8vrD3bjztlrR3ppGsg8CQ9N6kX+vnYkpy5ta0a7RpXlHcgpbvH7qKI4qOXUR6Wz/GgRm xe6yXcBHaPeIDoKf7ATPvg64Rf1MtA09fJfgedR5uG+McQGK/lsqLdmjj4zQVdeloupg eN+A==
X-Received: by 10.236.198.45 with SMTP id u33mr2059928yhn.37.1380722299962; Wed, 02 Oct 2013 06:58:19 -0700 (PDT)
Sender: Ned Batchelder <nedbat@gmail.com>
Date: Wed, 02 Oct 2013 09:58:17 -0400
From: Ned Batchelder <ned@nedbatchelder.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
MIME-Version: 1.0
To: =?UTF-8?B?zp3Or866zr/Pgg==?= <nikos.gr33k@gmail.com>
Subject: Re: Can arbitrary code run in a server if someone's know just the MySQL password?
References: <l2h31g$q96$1@dont-email.me> <524c1ee6$0$29984$c3e8da3$5496439d@news.astraweb.com> <l2h7qj$gqt$2@dont-email.me>
In-Reply-To: <l2h7qj$gqt$2@dont-email.me>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Cc: python-list@python.org
X-BeenThere: python-list@python.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe: <https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive: <http://mail.python.org/pipermail/python-list/>
List-Post: <mailto:python-list@python.org>
List-Help: <mailto:python-list-request@python.org?subject=help>
List-Subscribe: <https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups: comp.lang.python
Message-ID: <mailman.629.1380722323.18130.python-list@python.org>
Lines: 22
NNTP-Posting-Host: 2001:888:2000:d::a6
X-Trace: 1380722323 news.xs4all.nl 15940 [2001:888:2000:d::a6]:43112
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.python:55341

On 10/2/13 9:41 AM, Νίκος wrote:
> Στις 2/10/2013 4:25 μμ, ο/η Steven D'Aprano έγραψε:
>> On Wed, 02 Oct 2013 15:20:00 +0300, Νίκος wrote:
>>
>>> Is it possible for someone that knows the MYSQL password of a server to
>>> run arbitrary code on a linux server?
>>
>> Yes, it is possible.
>
> Is that what might have happened and someone managed to upload the 
> .html file in '~/home/nikos/www/' ?
>
> Can you think of any other way?
>

As others have said in this thread, this is not a Python topic. Find 
another forum for this question.  Do not ask it here again.

You've said that you can improve.  Show us by not asking non-Python 
questions here.

--Ned.