mariadb: access restriction bypass
| Package(s): | mariadb |
CVE #(s): | CVE-2016-6663
|
| Created: | September 15, 2016 |
Updated: | September 21, 2016 |
| Description: |
From the Arch Linux advisory:
- CVE-2016-6663 (access restriction bypass):
In the past mariadb used to read the main configuration file from three
different locations. One of them (the datadir) is unsafe because it's
writeable by the sql-server. This way a remote attacker who could gain
access to the sql-server could deploy a maliciously crafted
configuration file.
|
| Alerts: |
|
