MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-05-02 04:00
Updated : 2019-12-17 17:12
NVD link : CVE-2005-0711
Mitre link : CVE-2005-0711
CVE.ORG link : CVE-2005-0711
JSON object : View
Products Affected
mysql
- mysql
oracle
- mysql
CWE