CVE-2005-0711
Summary
| CVE | CVE-2005-0711 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2005-05-02 04:00:00 UTC |
| Updated | 2025-04-03 01:03:51 UTC |
| Description | MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack. |
Risk And Classification
Primary CVSS: v2.0 2.1 from [email protected]
AV:L/AC:L/Au:N/C:N/I:P/A:N
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:L/AC:L/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mysql | Mysql | 4.1.0 | All | All | All |
| Application | Mysql | Mysql | 4.1.10 | All | All | All |
| Application | Mysql | Mysql | 4.1.3 | All | All | All |
| Application | Oracle | Mysql | 3.23.49 | All | All | All |
| Application | Oracle | Mysql | 4.0.0 | All | All | All |
| Application | Oracle | Mysql | 4.0.1 | All | All | All |
| Application | Oracle | Mysql | 4.0.10 | All | All | All |
| Application | Oracle | Mysql | 4.0.11 | All | All | All |
| Application | Oracle | Mysql | 4.0.11 | gamma | All | All |
| Application | Oracle | Mysql | 4.0.12 | All | All | All |
| Application | Oracle | Mysql | 4.0.13 | All | All | All |
| Application | Oracle | Mysql | 4.0.14 | All | All | All |
| Application | Oracle | Mysql | 4.0.15 | All | All | All |
| Application | Oracle | Mysql | 4.0.18 | All | All | All |
| Application | Oracle | Mysql | 4.0.2 | All | All | All |
| Application | Oracle | Mysql | 4.0.20 | All | All | All |
| Application | Oracle | Mysql | 4.0.21 | All | All | All |
| Application | Oracle | Mysql | 4.0.23 | All | All | All |
| Application | Oracle | Mysql | 4.0.3 | All | All | All |
| Application | Oracle | Mysql | 4.0.4 | All | All | All |
| Application | Oracle | Mysql | 4.0.5 | All | All | All |
| Application | Oracle | Mysql | 4.0.5a | All | All | All |
| Application | Oracle | Mysql | 4.0.6 | All | All | All |
| Application | Oracle | Mysql | 4.0.7 | All | All | All |
| Application | Oracle | Mysql | 4.0.7 | gamma | All | All |
| Application | Oracle | Mysql | 4.0.8 | All | All | All |
| Application | Oracle | Mysql | 4.0.8 | gamma | All | All |
| Application | Oracle | Mysql | 4.0.9 | All | All | All |
| Application | Oracle | Mysql | 4.0.9 | gamma | All | All |
| Application | Oracle | Mysql | 4.1.0 | alpha | All | All |
| Application | Oracle | Mysql | 4.1.2 | alpha | All | All |
| Application | Oracle | Mysql | 4.1.3 | beta | All | All |
| Application | Oracle | Mysql | 4.1.4 | All | All | All |
| Application | Oracle | Mysql | 4.1.5 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| rhn.redhat.com | Red Hat Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| Repository / Oval Repository | af854a3a-2127-422b-91ae-364da2661108 | oval.cisecurity.org | |
| Gentoo Linux Documentation -- MySQL: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.gentoo.org | Patch |
| Neohapsis Archives - VulnWatch - #0082 - [VulnWatch] Mysql insecure temporary file creation with CREATE TEMPORARY TABLE privilege escalation | af854a3a-2127-422b-91ae-364da2661108 | archives.neohapsis.com | Exploit |
| #101864: Multiple Security Vulnerabilities in The "MySQL" Package | af854a3a-2127-422b-91ae-364da2661108 | sunsolve.sun.com | |
| MySQL AB MySQL Multiple Remote Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Patch |
| APPLE-SA-2005-08-17 Security Update 2005-007 v1.1 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| www.trustix.org/errata/2005/0009 | af854a3a-2127-422b-91ae-364da2661108 | www.trustix.org | Patch |
| rhn.redhat.com | Red Hat Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | Patch |
| APPLE-SA-2005-08-15 Security Update 2005-007 | af854a3a-2127-422b-91ae-364da2661108 | lists.apple.com | |
| Debian -- Security Information -- DSA-707-1 mysql | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | Exploit |
| Security Announcement | af854a3a-2127-422b-91ae-364da2661108 | www.novell.com | Patch |
| USN-96-1: mySQL vulnerabilities | Ubuntu security notices | af854a3a-2127-422b-91ae-364da2661108 | usn.ubuntu.com | |
| Advisories - Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.