CVE-2004-0381: Low severity MySQL mysql vulnerability
Published Apr 6, 2004
·Updated
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Affected Software
75 affected components
MySQL mysql=4.1.0
Oracle MySQL=3.20.32a
Oracle MySQL=3.22.26
Oracle MySQL=3.22.27
Oracle MySQL=3.22.28
Oracle MySQL=3.22.29
Oracle MySQL=3.22.30
Oracle MySQL=3.22.32
Oracle MySQL=3.23.2
Oracle MySQL=3.23.3
Oracle MySQL=3.23.5
Oracle MySQL=3.23.8
Oracle MySQL=3.23.9
Oracle MySQL=3.23.10
Oracle MySQL=3.23.22
Oracle MySQL=3.23.23
Oracle MySQL=3.23.24
Oracle MySQL=3.23.25
Oracle MySQL=3.23.26
Oracle MySQL=3.23.27
Oracle MySQL=3.23.28
Oracle MySQL=3.23.28-gamma
Oracle MySQL=3.23.29
Oracle MySQL=3.23.30
Oracle MySQL=3.23.31
Oracle MySQL=3.23.32
Oracle MySQL=3.23.33
Oracle MySQL=3.23.34
Oracle MySQL=3.23.36
Oracle MySQL=3.23.37
Oracle MySQL=3.23.38
Oracle MySQL=3.23.39
Oracle MySQL=3.23.40
Oracle MySQL=3.23.41
Oracle MySQL=3.23.42
Oracle MySQL=3.23.43
Oracle MySQL=3.23.44
Oracle MySQL=3.23.45
Oracle MySQL=3.23.46
Oracle MySQL=3.23.47
Oracle MySQL=3.23.48
Oracle MySQL=3.23.49
Oracle MySQL=3.23.50
Oracle MySQL=3.23.51
Oracle MySQL=3.23.52
Oracle MySQL=3.23.53
Oracle MySQL=3.23.53a
Oracle MySQL=3.23.54
Oracle MySQL=3.23.54a
Oracle MySQL=3.23.55
Oracle MySQL=3.23.56
Oracle MySQL=3.23.58
Oracle MySQL=4.0.0
Oracle MySQL=4.0.1
Oracle MySQL=4.0.2
Oracle MySQL=4.0.3
Oracle MySQL=4.0.4
Oracle MySQL=4.0.5
Oracle MySQL=4.0.5a
Oracle MySQL=4.0.6
Oracle MySQL=4.0.7
Oracle MySQL=4.0.7-gamma
Oracle MySQL=4.0.8
Oracle MySQL=4.0.8-gamma
Oracle MySQL=4.0.9
Oracle MySQL=4.0.9-gamma
Oracle MySQL=4.0.10
Oracle MySQL=4.0.11
Oracle MySQL=4.0.11-gamma
Oracle MySQL=4.0.12
Oracle MySQL=4.0.13
Oracle MySQL=4.0.14
Oracle MySQL=4.0.15
Oracle MySQL=4.0.18
Oracle MySQL=4.1.0-alpha
Remediation
Patch Available
Event History
Apr 6, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0381?
CVE-2004-0381 is considered to have a moderate severity level due to the potential for local users to exploit symlink attacks.
2
How do I fix CVE-2004-0381?
To mitigate CVE-2004-0381, users should upgrade to a patched version of MySQL that resolves this vulnerability.
3
Which versions of MySQL are affected by CVE-2004-0381?
CVE-2004-0381 affects multiple MySQL versions, including 3.20.32a, 3.22.26 to 3.23.56, and 4.1.0.
4
Can CVE-2004-0381 be exploited remotely?
No, CVE-2004-0381 is a local vulnerability and can only be exploited by users with local access to the system.
5
What are the potential impacts of CVE-2004-0381?
The main impact of CVE-2004-0381 is that it allows local users to overwrite arbitrary files and potentially escalate their privileges.