CVE-2005-0004: Medium severity Oracle MySQL vulnerability
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0004?
CVE-2005-0004 is considered a moderate severity vulnerability due to its potential for local file manipulation.
How do I fix CVE-2005-0004?
To fix CVE-2005-0004, update MySQL to a version later than 4.0.23, 4.1.10, or 5.0.3.
Which versions of MySQL are affected by CVE-2005-0004?
CVE-2005-0004 affects MySQL versions 4.0.23 and earlier, 4.1.x before 4.1.10, and 5.0.x before 5.0.3.
Can CVE-2005-0004 lead to information disclosure?
Yes, CVE-2005-0004 can allow local users to read temporary files, potentially leading to information disclosure.
Is there a workaround for CVE-2005-0004?
A potential workaround for CVE-2005-0004 is to restrict local user access to the MySQL service until an update is applied.