Description

The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Remediation

References

CVE-2004-0457

Related Vulnerabilities

WordPress Plugin WP Symposium SQL Injection (15.1)

WordPress Plugin Newsletter-Send awesome emails from WordPress CSV Injection (6.5.3)

PHP CVE-2007-5898 Vulnerability (CVE-2007-5898)

Python Out-of-bounds Write Vulnerability (CVE-2019-12900)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Open Redirect (2.0.19)

Severity

Medium

Classification

CVE-2004-0457

Tags

Missing Update Known Vulnerabilities