CVE-2005-0004
First published: Thu Apr 14 2005(Updated: )
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle MySQL | >=5.0.0<5.0.3 | |
| Oracle MySQL | >=4.0.0<4.0.23 | |
| Oracle MySQL | >=4.1.0<4.1.10 | |
| Debian Debian Linux | =3.0 | |
| Mariadb Mariadb | >=5.5.0<5.5.66 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2005/dsa-647
- http://secunia.com/advisories/13867
- http://www.securityfocus.com/bid/12277
- http://lists.mysql.com/internals/20600
- http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:036
- http://marc.info/?l=bugtraq&m=110608297217224&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18922
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- vendor/oracle
- vendor/mysql
- vendor/debian
- vendor/debian linux
- vendor/mariadb
- collector/nvd-index
- canonical/oracle mysql
- version/oracle mysql/5.0.0
- version/oracle mysql/4.0.0
- version/oracle mysql/4.1.0
- canonical/debian debian linux
- version/debian debian linux/3.0
- canonical/mariadb mariadb
- version/mariadb mariadb/5.5.0