NetSight
IP …
medium4.6

CVE-2005-1636

mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, whi…

Impact

mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents.

Affected products

VendorProductAffected versions
MysqlMysql
Versions 5.0.1, 5.0.2, 5.0.3, 5.0.4
OracleMysql
Versions 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5

References