Hi all,

I am just tried to create a new user on the  mysql command line:

create user 'fire'@'test' identified by 'gyg4u78';

Well, the answer was a "permission denied" because I did not connect  
as an admin account with appropriate permissions to do that.

Well, I reconnected using the right account and was surprised to see  
the same command when I browsed through the latest commands using the  
"up arrow".

So another user sees the commands recently executed by another user -  
in this case modifying access and a password.

Can you please try to reproduce it?

The version I used was 5.5.33 from the FreeBSD ports.

I consider it a serious security flaw.

Regards
Peter


_______________________________________________
luv-main mailing list
[email protected]
http://lists.luv.asn.au/listinfo/luv-main

Reply via email to