CVE-2005-0004
First published: Thu Apr 14 2005(Updated: )
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| MySQL | >=5.0.0<5.0.3 | |
| MySQL | >=4.0.0<4.0.23 | |
| MySQL | >=4.1.0<4.1.10 | |
| Debian Linux | =3.0 | |
| MariaDB | >=5.5.0<5.5.66 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2005/dsa-647
- http://secunia.com/advisories/13867
- http://www.securityfocus.com/bid/12277
- http://lists.mysql.com/internals/20600
- http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:036
- http://marc.info/?l=bugtraq&m=110608297217224&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18922
Frequently Asked Questions
What is the severity of CVE-2005-0004?
CVE-2005-0004 is considered a moderate severity vulnerability due to its potential for local file manipulation.
How do I fix CVE-2005-0004?
To fix CVE-2005-0004, update MySQL to a version later than 4.0.23, 4.1.10, or 5.0.3.
Which versions of MySQL are affected by CVE-2005-0004?
CVE-2005-0004 affects MySQL versions 4.0.23 and earlier, 4.1.x before 4.1.10, and 5.0.x before 5.0.3.
Can CVE-2005-0004 lead to information disclosure?
Yes, CVE-2005-0004 can allow local users to read temporary files, potentially leading to information disclosure.
Is there a workaround for CVE-2005-0004?
A potential workaround for CVE-2005-0004 is to restrict local user access to the MySQL service until an update is applied.
- agent/type
- agent/references
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- vendor/oracle
- vendor/mysql
- vendor/debian
- vendor/debian linux
- vendor/mariadb
- agent/software-canonical-lookup-request
- collector/nvd-index
- canonical/mysql
- version/mysql/5.0.0
- version/mysql/4.0.0
- version/mysql/4.1.0
- canonical/debian linux
- version/debian linux/3.0
- canonical/mariadb
- version/mariadb/5.5.0