Published: 04/05/2004 Updated: 17/12/2019

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle mysql 3.20.32a
oracle mysql 3.23.10
oracle mysql 3.23.2
oracle mysql 3.22.30
oracle mysql 3.22.32
oracle mysql 3.23.27
oracle mysql 3.23.28
oracle mysql 3.23.33
oracle mysql 3.23.34
oracle mysql 3.23.42
oracle mysql 3.23.43
oracle mysql 3.23.50
oracle mysql 3.23.51
oracle mysql 3.23.56
oracle mysql 3.23.58
oracle mysql 4.0.11
oracle mysql 4.0.12
oracle mysql 4.0.13
oracle mysql 4.0.5
oracle mysql 4.0.5a
oracle mysql 4.0.9
mysql mysql 4.1.0
oracle mysql 3.22.28
oracle mysql 3.22.29
oracle mysql 3.23.25
oracle mysql 3.23.26
oracle mysql 3.23.31
oracle mysql 3.23.32
oracle mysql 3.23.40
oracle mysql 3.23.41
oracle mysql 3.23.49
oracle mysql 3.23.5
oracle mysql 3.23.54a
oracle mysql 3.23.55
oracle mysql 4.0.10
oracle mysql 4.0.3
oracle mysql 4.0.4
oracle mysql 4.0.8
oracle mysql 3.23.29
oracle mysql 3.23.36
oracle mysql 3.23.37
oracle mysql 3.23.44
oracle mysql 3.23.45
oracle mysql 3.23.46
oracle mysql 3.23.52
oracle mysql 3.23.53
oracle mysql 3.23.8
oracle mysql 3.23.9
oracle mysql 4.0.14
oracle mysql 4.0.15
oracle mysql 4.0.6
oracle mysql 4.0.7
oracle mysql 4.1.0
oracle mysql 3.22.26
oracle mysql 3.22.27
oracle mysql 3.23.22
oracle mysql 3.23.23
oracle mysql 3.23.24
oracle mysql 3.23.3
oracle mysql 3.23.30
oracle mysql 3.23.38
oracle mysql 3.23.39
oracle mysql 3.23.47
oracle mysql 3.23.48
oracle mysql 3.23.53a
oracle mysql 3.23.54
oracle mysql 4.0.0
oracle mysql 4.0.1
oracle mysql 4.0.18
oracle mysql 4.0.2

Synopsis mysql security update Type/Severity Security Advisory: Low Topic Updated mysql packages that fix various temporary file security issues,as well as a number of bugs, are now available Description MySQL is a multi-user, multi-threaded SQL database serverThis update fixes a number o ...

Synopsis mysql security update Type/Severity Security Advisory: Important Topic Updated mysql packages that fix various security issues, as well as anumber of bugs, are now available for Red Hat Enterprise Linux 21 Description MySQL is a multi-user, multi-threaded SQL database serverA nu ...

Next generation host vulnerability scanning based on version matching rule base

trule Next generation host vulnerability scanning based on version matching rule base We define the following rules for version based vulnerability detection <Vulns> <Vulnerability added="2004-12-22" id="mysql-bug-report-symlink" modified="2013-08-22" published="2004-05-04" version="20"> <

NVD-CWE-Other http://www.securityfocus.com/bid/9976 http://www.debian.org/security/2004/dsa-483 http://security.gentoo.org/glsa/glsa-200405-20.xml http://www.redhat.com/support/errata/RHSA-2004-569.html http://www.redhat.com/support/errata/RHSA-2004-597.html http://www.ciac.org/ciac/bulletins/p-018.shtml http://www.mandriva.com/security/advisories?name=MDKSA-2004:034 http://marc.info/?l=bugtraq&m=108206802810402&w=2 http://marc.info/?l=bugtraq&m=108023246916294&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15617 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11557 https://access.redhat.com/errata/RHSA-2004:569 https://nvd.nist.gov https://github.com/365sec/trule

CVE-2004-0381

Vulnerability Summary

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect