Re: MySQL 5.0 information leak?

[Stephen Frost <sfrost () snowman net>]

* Bernd Wurst (bernd () bwurst org) wrote:
> I think of this as a security issue because I have user accounts (nss) 
> that have publicly available credentials but noone should be able to 
> see how the database really is organized. 
>
> What do you think of this? Bug?

Probably not but the answer you seek is in the SQL specification.
Information Schema is defined there and it also defines what is allowed
to be seen and by whom.  Wanting to hide the database layout from the
users of the database in this way seems quite... confused.

        Thanks,

                Stephen

Attachment: signature.asc
Description: Digital signature