Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0150. PoCs published by [email protected].
AI-analyzed exploit summary This exploit leverages a MySQL configuration file vulnerability to escalate privileges by creating a malicious 'my.cnf' file in the DATADIR, forcing the mysqld service to run as root. The PoC demonstrates the steps to create and populate the configuration file via SQL commands.
Description
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.
Exploits (1)
This exploit leverages a MySQL configuration file vulnerability to escalate privileges by creating a malicious 'my.cnf' file in the DATADIR, forcing the mysqld service to run as root. The PoC demonstrates the steps to create and populate the configuration file via SQL commands.