4.6

CVE-2005-0004

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Mysql Version >= 4.0.0 < 4.0.23
Oracle ≫ Mysql Version >= 4.1.0 < 4.1.10
Oracle ≫ Mysql Version >= 5.0.0 < 5.0.3
Debian ≫ Debian Linux Version3.0
Mariadb ≫ Mariadb Version >= 5.5.0 < 5.5.66
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.437
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
Broken Link
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947
Third Party Advisory
http://lists.mysql.com/internals/20600
Third Party Advisory
http://marc.info/?l=bugtraq&m=110608297217224&w=2
Third Party Advisory
http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html
Broken Link
http://secunia.com/advisories/13867
Not Applicable
http://www.debian.org/security/2005/dsa-647
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:036
Broken Link
http://www.securityfocus.com/bid/12277
Patch
Third Party Advisory
Vendor Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/18922
Third Party Advisory
VDB Entry