Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2005-0004

Опубликовано: 19 янв. 2005
Источник: redhat
CVSS3: 7.9

Описание

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5mysql55-mysqlNot affected
Red Hat Enterprise Linux 6mysqlNot affected
Red Hat Enterprise Linux 7mariadbNot affected
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)mariadb-galeraNot affected
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)mariadb-galeraNot affected
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)mariadb-galeraNot affected
Red Hat OpenStack Platform 8 (Liberty)mariadb-galeraNot affected
Red Hat Software Collectionsmariadb55-mariadbNot affected
Red Hat Software Collectionsmysql55-mysqlNot affected
Red Hat Software Collectionsrh-mariadb100-mariadbNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-266
https://bugzilla.redhat.com/show_bug.cgi?id=1386138mysql: mysqlaccess creates/overwrite files on the system

7.9 High

CVSS3

Связанные уязвимости

ubuntu
около 20 лет назад

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

nvd
около 20 лет назад

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

debian
около 20 лет назад

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.1 ...

github
около 3 лет назад

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

7.9 High

CVSS3