CVE-2005-0004

MySQL < 4.0.23, 4.1.x < 4.1.10, 5.0.x < 5.0.3 - Arbitrary File Write via Symlink Attack on Temporary Files

Title source: llm
STIX 2.1

Description

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

References (10)

Core 10
Core References
Third Party Advisory vendor-advisory x_refsource_conectiva
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947
Patch, Vendor Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-647
Broken Link vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2005:036
Broken Link vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
Third Party Advisory mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110608297217224&w=2
Not Applicable third-party-advisory x_refsource_secunia
http://secunia.com/advisories/13867
Patch, Third Party Advisory, VDB Entry, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/12277
Third Party Advisory x_refsource_confirm
http://lists.mysql.com/internals/20600
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18922

Scores

EPSS 0.0004
EPSS Percentile 11.7%

Details

CWE
CWE-59
Status published
Products (3)
debian/debian_linux 3.0
mariadb/mariadb 5.5.0 - 5.5.66
oracle/mysql 4.0.0 - 4.0.23
Published Apr 14, 2005
Tracked Since Feb 18, 2026