Исходное сообщение
"Критическая root-уязвимость в MySQL" Отправлено Аноним, 13-Сен-16 23:09
> Эксплуатация возможно только если у пользователя есть право FILE или SUPER на Ничего подобного, вы просто не дочитали до конца: It is worth to note that attackers could use one of the other vulnerabilities discovered by the author of this advisory which has been assigned a CVEID of CVE-2016-6663 and is pending disclosure. The undisclosed vulnerability makes it easy for certain attackers to create /var/lib/mysql/my.cnf file with arbitrary contents without the FILE privilege requirement. ... It could also be combined with CVE-2016-6663 vulnerability which will be released shortly and could allow certain attackers to escalate their privileges to root even without FILE privilege.