Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-0004

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

Published

2005-04-14T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-59

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oracle	mysql	< 4.0.23	Yes
Application	oracle	mysql	< 4.1.10	Yes
Application	oracle	mysql	< 5.0.3	Yes
Operating System	debian	debian_linux	3.0	Yes
Application	mariadb	mariadb	< 5.5.66	Yes

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947 Third Party Advisory ([email protected])
http://lists.mysql.com/internals/20600 Third Party Advisory ([email protected])
http://marc.info/?l=bugtraq&m=110608297217224&w=2 Third Party Advisory ([email protected])
http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html Broken Link ([email protected])
http://secunia.com/advisories/13867 Not Applicable ([email protected])
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 Broken Link ([email protected])
http://www.debian.org/security/2005/dsa-647 Patch, Vendor Advisory ([email protected])
http://www.mandriva.com/security/advisories?name=MDKSA-2005:036 Broken Link ([email protected])
http://www.securityfocus.com/bid/12277 Patch, Third Party Advisory, VDB Entry, Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/18922 Third Party Advisory, VDB Entry ([email protected])
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://lists.mysql.com/internals/20600 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://marc.info/?l=bugtraq&m=110608297217224&w=2 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/13867 Not Applicable (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2005/dsa-647 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.mandriva.com/security/advisories?name=MDKSA-2005:036 Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/12277 Patch, Third Party Advisory, VDB Entry, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/18922 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)