Possible mysql bug found

Stever <[email protected]> Fri, 17 Jun 2005 16:24:56 -0700
Newsgroups gmane.comp.db.mysql.bugs
Message-ID <[email protected]>
Guys,

I encountered an interesting (possible) bug in mysql. It’s really weird.

I am able to create a new database using a limited account Where I 
should not be able to. I shouldn’t be able to do this, but discovered it 
using phpmyadmin. Intrigued, I checked it out. At first, I thought this 
was a phpmyadmin issue, but I think it is instead a mysql issue. Here 
are the steps I used to replicate the issue:

1) Log in using commandline client “mysql -u AnyOne -pâ€. Use permissions 
at the bottom of this message
2) Do a: CREATE DATABASE `Stever` <---- this cannot be done
3) Do a: CREATE DATABASE `MYSQLDB?12963` <------ this *can* be done
4) Do a: DROP DATABASE `MYSQLDB?12963` <------ this *can* be done
5) Do a: CREATE DATABASE `MYSQLD??12963` <------ this cannot be done

Permissions for this user is as follows:
DB Table
+------+---------------+-------------+-------------+-------------+-------------+-------------+-------------+-----------+------------+-----------------+------------+------------+-----------------------+------------------+
| Host | Db | User | Select_priv | Insert_priv | Update_priv | 
Delete_priv | Create_priv | Drop_priv | Grant_priv | References_priv | 
Index_priv | Alter_priv | Create_tmp_table_priv | Lock_tables_priv |
+------+---------------+-------------+-------------+-------------+-------------+-------------+-------------+-----------+------------+-----------------+------------+------------+-----------------------+------------------+
| % | MYSQLDB_59653 | AnyOne | Y | Y | Y | Y | Y | Y | N | N | Y | Y | N 
| Y |
+------+---------------+-------------+-------------+-------------+-------------+-------------+-------------+-----------+------------+-----------------+------------+------------+-----------------------+------------------+

User table:
+------+-------------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+
| Host | User | Password | Select_priv | Insert_priv | Update_priv | 
Delete_priv | Create_priv | Drop_priv | Reload_priv | Shutdown_priv | 
Process_priv | File_priv | Grant_priv | References_priv | Index_priv | 
Alter_priv | Show_db_priv | Super_priv | Create_tmp_table_priv | 
Lock_tables_priv | Execute_priv | Repl_slave_priv | Repl_client_priv | 
ssl_type | ssl_cipher | x509_issuer | x509_subject | max_questions | 
max_updates | max_connections |
+------+-------------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+
| % | AnyOne | 414a2b142fcb7497 | N | N | N | N | N | N | N | N | N | N 
| N | N | N | N | N | N | N | N | N | N | N | | | | | 0 | 0 | 0 |
+------+-------------+------------------+-------------+-------------+-------------+-------------+-------------+-----------+-------------+---------------+--------------+-----------+------------+-----------------+------------+------------+--------------+------------+-----------------------+------------------+--------------+-----------------+------------------+----------+------------+-------------+--------------+---------------+-------------+-----------------+

Host table:
- empty -

I cannot find much on the question mark parameter in the mysql pdf 
manual. I am using Mysql 4.1.12

- Steve



-- 
MySQL Bugs Mailing List
For list archives: http://lists.mysql.com/bugs
To unsubscribe:    http://lists.mysql.com/[email protected]