CVE-2005-0711: Low severity MySQL mysql vulnerability
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0711?
CVE-2005-0711 is considered a medium severity vulnerability due to the potential for local users to exploit predictable file names.
How do I fix CVE-2005-0711?
To fix CVE-2005-0711, upgrade to MySQL version 4.1.11 or later to eliminate the risk of symlink attacks.
Who is affected by CVE-2005-0711?
CVE-2005-0711 affects local users of MySQL versions up to 4.1.10 and all 4.0.x versions.
What types of attacks can be performed using CVE-2005-0711?
Using CVE-2005-0711, attackers can perform a symlink attack to overwrite arbitrary files on the system.
Is CVE-2005-0711 specific to certain MySQL versions?
Yes, CVE-2005-0711 specifically targets MySQL versions 4.0.23 and earlier, as well as 4.1.x versions up to 4.1.10.