4.6

CVE-2005-0004

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Mysql Version >= 4.0.0 < 4.0.23
Oracle ≫ Mysql Version >= 4.1.0 < 4.1.10
Oracle ≫ Mysql Version >= 5.0.0 < 5.0.3
Debian ≫ Debian Linux Version3.0
Mariadb ≫ Mariadb Version >= 5.5.0 < 5.5.66
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.116
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

http://www.securityfocus.com/bid/12277
Patch
Third Party Advisory
Vendor Advisory
VDB Entry