Sign up ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Suppose that I have full root access to mysql databases, but not root user shell (linux). How can I use the full root access to mysql databases to execute root commands?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Assuming the MySQL daemon runs as a non-root user, you can't. At worst, you can exploit a vulnerability in the MySQL daemon and gain a shell running as the same user as MySQL. From there you'd have to use a local privilege escalation vulnerability in the OS to gain root.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.