MariaDB server is a community developed fork of MySQL server. Started by core members of the original MySQL team, MariaDB actively works with outside developers to deliver the most featureful, stable, and sanely licensed open SQL server in the industry.
Find a file
Shishir Jaiswal 788fb5bf67 Bug#25043674 - MYSQLACCESS SCRIPT LOADS AND EXECUTES CODE
FROM THE CURRENT DIRECTORY

DESCRIPTION
===========
When 'mysqlaccess' tool is run, it reads (and executes) the
content of its configuration file 'mysqlaccess.conf' from
the current directory. This is not a recommended behaviour
as someone with ill intentions can insert malicious
instructions into this file which could be executed
whenever this tool is run.

ANALYSIS
========
The configuration file is presently looked for, in the
following folders (in given order):
1. Current directory
2. SYSCONFDIR       //This gets expanded
3. /etc/

Owing to the reasons mentioned above, we should not permit
the file to be in the current directory. Since the other
two folders are assumed to be accessible only to authorized
people, the config file is safe to be read from there.

FIX
===
Modified the script so that it looks for the config file
now in the following two folders (in the given order):
1. SYSCONFDIR
2. /etc/

If it's absent from above locations but present in current
directory, an error is thrown asking the user to move the
file to one of the above locations and retry.

NOTE
====
The location paths and their precedence are not documented
for this tool. It needs to be noted as part of the
associated documentation.
2017-04-17 12:04:14 +05:30
BUILD Updated/added copyright header. Added line "use is subject to license terms" 2014-02-17 18:19:04 +05:30
client Bug #25717383: MYSQLDUMP MAY EXECUTE ANY ARBITRARY QUERY 2017-03-17 08:41:31 +01:00
cmake Bug#25611609 LINK WITH DYNAMIC RUNTIME LIBRARIES ON WINDOWS 2017-02-27 09:38:00 +01:00
cmd-line-utils Merge branch 'mysql-5.1' into mysql-5.5 2015-04-24 11:31:59 +05:30
dbug BUG#16402143 - STACK CORRUPTION IN DBUG_EXPLAIN 2013-04-10 11:50:41 +05:30
Docs Merging the changes for Bug 16633169 - MYSQL.INFO CONTAINS OUTDATED INFORMATION. 2013-04-16 12:17:18 +02:00
extra Bug #24740291: YASSL UPDATE TO 2.4.2 2016-09-27 11:17:38 +02:00
include BUG#25575605: SETTING --SSL-MODE=REQUIRED SENDS CREDENTIALS BEFORE VERIFYING SSL CONNECTION 2017-03-13 17:01:59 +04:00
libmysql Bug#21973610: BUFFER OVERFLOW ISSUES 2015-11-06 16:41:55 +05:30
libmysqld Bug#17633291: SET PROPER COMPILE OPTIONS FOR CLANG 2014-10-13 09:52:28 +02:00
libservices Updated/added copyright headers 2011-06-30 17:46:53 +02:00
man Exclude NDB man pages from a source tarball, 2011-10-04 12:28:30 +02:00
mysql-test Bug#25043674 - MYSQLACCESS SCRIPT LOADS AND EXECUTES CODE 2017-04-17 12:04:14 +05:30
mysys Bug#24388746: PRIVILEGE ESCALATION AND RACE CONDITION USING CREATE TABLE 2016-08-19 09:09:07 +02:00
packaging Bug#25287707 THE PID-FILE VALUE IS IGNORED IN THE /ETC/MY.CNF OPTION FILE 2017-02-14 12:37:39 +01:00
plugin Bug#21770366 backport bug#21657078 to 5.5 and 5.6 2016-01-07 14:36:19 +05:30
regex Bug#24449090 - BUFFER OVERFLOW IN FUNCTION DUPL 2016-12-04 18:44:51 +05:30
scripts Bug#25043674 - MYSQLACCESS SCRIPT LOADS AND EXECUTES CODE 2017-04-17 12:04:14 +05:30
sql BUG#25250768: WRITING ON A READ_ONLY=ON SERVER WITHOUT SUPER 2017-04-07 13:20:19 +05:30
sql-bench Bug#16395459 TEST AND RESULT FILES WITH EXECUTE BIT 2014-06-25 12:35:50 +02:00
sql-common BUG#25575605: SETTING --SSL-MODE=REQUIRED SENDS CREDENTIALS BEFORE VERIFYING SSL CONNECTION 2017-03-10 01:19:50 +04:00
storage Bug #25447551: HANDLE_FATAL_SIGNAL (SIG=11) IN 2017-03-15 16:45:21 +05:30
strings Bug #23296299 : HANDLE_FATAL_SIGNAL (SIG=11) IN 2016-07-01 12:01:27 +05:30
support-files Bug#25144379 MYSQLD PROCESS DOES NOT INCLUDE FULL PATH WHEN STARTING MYSQL SERVER 2017-02-13 14:56:28 +01:00
tests Changing the copyright headers a bit to be complaint with the standards 2014-08-27 16:06:50 +02:00
unittest Updated/added copyright header. Added line "use is subject to license terms" 2014-02-17 18:19:04 +05:30
vio Bug#21920657: SSL-CA FAILS SILENTLY IF THE PATH CANNOT BE 2016-03-01 10:17:25 +05:30
win Updated/added copyright headers 2011-06-30 17:46:53 +02:00
zlib Backport from trunk: 2014-05-07 17:09:14 +02:00
.gitattributes Bug#22240513 REMOVE GITIGNORE / BZRIGNORE FROM OFFICIAL RELEASE 2016-12-05 09:19:07 +01:00
.gitignore Create .gitignore as a copy of .bzrignore 2014-10-06 12:54:53 +02:00
BUILD-CMAKE Updated/added copyright headers 2011-06-30 17:46:53 +02:00
CMakeLists.txt Bug#18374703 COMPILATION ERROR WITH -DENABLE_DEBUG_SYNC=0 AND -DWITH_DEBUG=ON 2017-01-17 16:48:24 +01:00
config.h.cmake Bug#24707666: DEFAULT SETTING FOR SECURE-FILE-PRIV SHOULD BE 2016-09-28 15:52:05 +05:30
configure.cmake Bug#21770366 backport bug#21657078 to 5.5 and 5.6 2016-01-07 14:36:19 +05:30
COPYING Use a new version of "COPYING", the GPL text. 2010-03-04 14:26:27 +01:00
INSTALL-SOURCE Merging the changes for Bug 16633169 - MYSQL.INFO CONTAINS OUTDATED INFORMATION. 2013-04-16 12:17:18 +02:00
INSTALL-WIN-SOURCE Merging the changes for Bug 16633169 - MYSQL.INFO CONTAINS OUTDATED INFORMATION. 2013-04-16 12:17:18 +02:00
README Updated copyright year in user visible text 2017-01-06 18:15:13 +05:30
VERSION Raise version number after cloning 5.5.55 2017-02-27 17:20:51 +05:30

MySQL Server 5.5

This is a release of MySQL, a dual-license SQL database server.
For the avoidance of doubt, this particular copy of the software 
is released under the version 2 of the GNU General Public License. 
MySQL is brought to you by Oracle.

Copyright (c) 2000, 2017, Oracle and/or its affiliates. All rights reserved.

License information can be found in the COPYING file.

MySQL FOSS License Exception
We want free and open source software applications under certain
licenses to be able to use specified GPL-licensed MySQL client
libraries despite the fact that not all such FOSS licenses are
compatible with version 2 of the GNU General Public License.  
Therefore there are special exceptions to the terms and conditions 
of the GPLv2 as applied to these client libraries, which are 
identified and described in more detail in the FOSS License 
Exception at 
<http://www.mysql.com/about/legal/licensing/foss-exception.html>.

This distribution may include materials developed by third
parties. For license and attribution notices for these
materials, please refer to the documentation that accompanies
this distribution (see the "Licenses for Third-Party Components"
appendix) or view the online documentation at 
<http://dev.mysql.com/doc/>.

GPLv2 Disclaimer
For the avoidance of doubt, except that if any license choice
other than GPL or LGPL is available it will apply instead, 
Oracle elects to use only the General Public License version 2 
(GPLv2) at this time for any software where a choice of GPL 
license versions is made available with the language indicating 
that GPLv2 or any later version may be used, or where a choice 
of which version of the GPL is applied is otherwise unspecified.

For further information about MySQL or additional documentation, 
see:
- The latest information about MySQL: http://www.mysql.com
- The current MySQL documentation: http://dev.mysql.com/doc

Some Reference Manual sections of special interest:
- If you are migrating from an older version of MySQL, please 
  read the "Upgrading from..." section.
- To see what MySQL can do, take a look at the features section.
- For installation instructions, see the Installing and Upgrading
  chapter.
- For the new features/bugfix history, see the MySQL Change History 
  appendix.

You can browse the MySQL Reference Manual online or download it 
in any of several formats at the URL given earlier in this file.
Source distributions include a local copy of the manual in the
Docs directory.