up vote 2 down vote favorite

Suppose that I have full root access to mysql databases, but not root user shell (linux). How can I use the full root access to mysql databases to execute root commands?

share|improve this question

1 Answer

up vote 1 down vote accepted

Assuming the MySQL daemon runs as a non-root user, you can't. At worst, you can exploit a vulnerability in the MySQL daemon and gain a shell running as the same user as MySQL. From there you'd have to use a local privilege escalation vulnerability in the OS to gain root.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.