MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0082.html - Exploit | |
| References | () http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html - | |
| References | () http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html - | |
| References | () http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 - | |
| References | () http://www.debian.org/security/2005/dsa-707 - Exploit | |
| References | () http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml - Patch | |
| References | () http://www.mandriva.com/security/advisories?name=MDKSA-2005:060 - | |
| References | () http://www.novell.com/linux/security/advisories/2005_19_mysql.html - Patch | |
| References | () http://www.redhat.com/support/errata/RHSA-2005-334.html - Patch | |
| References | () http://www.redhat.com/support/errata/RHSA-2005-348.html - | |
| References | () http://www.securityfocus.com/bid/12781 - Patch | |
| References | () http://www.trustix.org/errata/2005/0009/ - Patch | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9591 - | |
| References | () https://usn.ubuntu.com/96-1/ - |
Information
Published : 2005-05-02 04:00
Updated : 2024-11-20 23:55
NVD link : CVE-2005-0711
Mitre link : CVE-2005-0711
CVE.ORG link : CVE-2005-0711
JSON object : View
Products Affected
oracle
- mysql
mysql
- mysql
CWE