CVE-2003-0150 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2003-0150
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2003-0150

Description: MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/11510 REDHAT http://rhn.redhat.com/errata/RHSA-2003-094.html http://www.redhat.com/support/errata/RHSA-2003-093.html OVAL http://oval.mitre.org/oval/definitions/data/oval442.html MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:057 ENGARDE http://www.linuxsecurity.com/advisories/engarde_advisory-3046.html DEBIAN http://www.debian.org/security/2003/dsa-303 CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743 CERT-VN 203897 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=104800948128630&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=104802285012750&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=104739810523433&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=104715840202315&w=2 BID 7052

Return to the previous page.