Description

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

Remediation

References

CVE-2005-0004

Related Vulnerabilities

CubeCart Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20703)

Magento Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-7942)

MediaWiki Improper Input Validation Vulnerability (CVE-2020-35477)

qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-26166)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-23179)

Severity

Medium

Classification

CVE-2005-0004 CWE-59

Tags

Missing Update Known Vulnerabilities