Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Suppose that I have full root access to mysql databases, but not root user shell (linux). How can I use the full root access to mysql databases to execute root commands?

share|improve this question
up vote 2 down vote accepted

Assuming the MySQL daemon runs as a non-root user, you can't. At worst, you can exploit a vulnerability in the MySQL daemon and gain a shell running as the same user as MySQL. From there you'd have to use a local privilege escalation vulnerability in the OS to gain root.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.