← Back to team overview

maria-discuss team mailing list archive

Re: Critical Update for CVE-2016-6662

 

a service itself *must not* have the permissions to write it's config files
The safeguard script also reads configuration files from MySQLs data 
directory which is writable by the service.
Though the author also cowers cases of bad configuration and possible 
victims.

"Root-Code-Execution" is clickbait
Since when a CVE is a clickbait ..

rr





Follow ups

References