CVE-2005-0711
N/A
N/A
Summary
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9591
- http://www.trustix.org/errata/2005/0009/
- http://www.debian.org/security/2005/dsa-707
- http://www.redhat.com/support/errata/RHSA-2005-334.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
- http://www.novell.com/linux/security/advisories/2005_19_mysql.html
- https://usn.ubuntu.com/96-1/
- http://www.redhat.com/support/errata/RHSA-2005-348.html
- http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0082.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:060
- http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://www.securityfocus.com/bid/12781
References
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9591
- http://www.trustix.org/errata/2005/0009/
- http://www.debian.org/security/2005/dsa-707
- http://www.redhat.com/support/errata/RHSA-2005-334.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
- http://www.novell.com/linux/security/advisories/2005_19_mysql.html
- https://usn.ubuntu.com/96-1/
- http://www.redhat.com/support/errata/RHSA-2005-348.html
- http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0082.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:060
- http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://www.securityfocus.com/bid/12781
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.