CVE-2004-0457: Medium severity ORACLE MySQL vulnerability
Published Aug 19, 2004
·Updated
The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected Software
1 affected component
ORACLE MySQL<=4.0.20
Remediation
Patch Available
Event History
Aug 19, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0457?
CVE-2004-0457 is considered a moderate severity vulnerability due to its potential for local users to exploit the symlink attack.
2
How do I fix CVE-2004-0457?
To fix CVE-2004-0457, upgrade to MySQL version 4.0.21 or later which addresses this issue.
3
What are the potential impacts of CVE-2004-0457?
The potential impact of CVE-2004-0457 includes unauthorized overwriting of arbitrary files by local users.
4
Who is primarily affected by CVE-2004-0457?
Local users of MySQL version 4.0.20 and earlier are primarily affected by CVE-2004-0457.
5
What system components are involved in CVE-2004-0457?
The mysqlhotcopy script in the MySQL server package is involved in CVE-2004-0457.