0002086: Security Issue: GMs can Access MYSQL Settings - SphereServer BugTracker

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

ID

Project

Category

View Status

Date Submitted

Last Update

0002086

SphereServer

executable - generic

public

01-08-12 19:11

22-09-12 16:01

Reporter

Marlek

Assigned To

Ben

Priority

normal

Severity

major

Reproducibility

always

Status

resolved

Resolution

fixed

Platform

OS

OS Version

Product Version

Target Version

Fixed in Version

0.56c Nightly

Summary

0002086: Security Issue: GMs can Access MYSQL Settings

Description

.show serv.mysqlpassword

Result: Configured MySQL PW gets displayed (Works with other MySQL Settings too).

Tags

No tags attached.

Nightly Version

Automated (specify build number)

Experimental Flags

UsePingServer

Option Flags

Command_Sysmsgs, OSIMultiSight, FileCommands, NoHouseMuteSpeech, Buffs, NoPrefix

Internal Build Number

1513

Relationships

Notes
(0001349) Mirravin (reporter) 01-08-12 20:00	// Set from 0 - 7 to set what the default plevel is to use commands. DefaultCommandLevel=7 ?

(0001383) Ben (manager) 19-09-12 04:57	Just add SERV.MYSQLPASSWORD under the [PLEVEL 7] group in spheretables.scp It will be added in the scripts by default.

Issue History
Date Modified	Username	Field	Change
01-08-12 19:11	Marlek	New Issue
01-08-12 20:00	Mirravin	Note Added: 0001349
19-09-12 04:57	Ben	Note Added: 0001383
19-09-12 04:57	Ben	Assigned To	=> Ben
19-09-12 04:57	Ben	Status	new => assigned
22-09-12 16:01	Ben	Status	assigned => resolved
22-09-12 16:01	Ben	Fixed in Version	=> 0.56c Nightly
22-09-12 16:01	Ben	Resolution	open => fixed

Copyright © 2000 - 2010 MantisBT Group