Package: mysql-server-5.0
Version: 5.0.32-7etch5
Severity: critical
Tags: security etch

I have mysqld configured to bind to 127.0.0.1 (which is the default
it seems):

  sheep# grep '^bind' /etc/mysql/my.cnf
  bind-address= 127.0.0.1

and yet:

  sheep# netstat -natp | grep mysqld
  tcp        0      0 92.42.190.29:3306       0.0.0.0:* LISTEN     26443/mysqld

It turns out that this is because I cannot actually bring up the lo
interface on a vserver:

  sheep# ifup lo
  SIOCSIFADDR: Permission denied
  SIOCSIFFLAGS: Permission denied
  SIOCSIFFLAGS: Permission denied
  Failed to bring up lo.

Arguably, this is a problem with the vserver, but mysqld should
definitely not bind to any as a consequence. Instead, it should
refuse to start.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25-2-amd64 (SMP w/1 CPU core)
Locale: LANG=en_GB, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

-- 
 .''`.   martin f. krafft <[EMAIL PROTECTED]>
: :'  :  proud Debian developer, author, administrator, and user
`. `'`   http://people.debian.org/~madduck - http://debiansystem.info
  `-  Debian - when you have better things to do than fixing systems

Attachment: digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)

Reply via email to