CVE-2001-0407

Oracle Mysql < 3.23.36 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).

Exploits (1)

exploitdb WORKING POC VERIFIED

by lesha · textlocalunix

https://www.exploit-db.com/exploits/20718

View Code ZIP pw:eip

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/2522

Exploit, Vendor Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.html

Patch, Vendor Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/6617

Scores

EPSS 0.0069

EPSS Percentile 72.0%

Details

Status published

Products (1)

oracle/mysql < 3.23.36

Published Jun 27, 2001

Tracked Since Feb 18, 2026