{"api_version":"1","generated_at":"2026-07-23T11:46:49+00:00","cve":"CVE-2005-0004","urls":{"html":"https://cve.report/CVE-2005-0004","api":"https://cve.report/api/cve/CVE-2005-0004.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-0004","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-0004"},"summary":{"title":"CVE-2005-0004","description":"The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-04-14 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-59","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.6","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947","name":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"Home - Conectiva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/12277","name":"http://www.securityfocus.com/bid/12277","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"],"title":"MySQL Database MySQLAccess Local Insecure Temporary File Creation Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"#101864: Multiple Security Vulnerabilities in The \"MySQL\" Package","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=110608297217224&w=2","name":"http://marc.info/?l=bugtraq&m=110608297217224&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:036","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:036","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"Advisories - Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html","name":"http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18922","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18922","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.mysql.com/internals/20600","name":"http://lists.mysql.com/internals/20600","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"title":"MySQL Lists: internals: bk commit into 4.0 tree (serg:1.2026)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/13867","name":"http://secunia.com/advisories/13867","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"],"title":"Secunia - Advisories - MySQL mysqlaccess Script Insecure Temporary File Creation","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2005/dsa-647","name":"http://www.debian.org/security/2005/dsa-647","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Debian -- Security Information -- DSA-647-1 mysql","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0004","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0004","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"4","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T20:57:40.758Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"CLA-2005:947","tags":["vendor-advisory","x_refsource_CONECTIVA","x_transferred"],"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947"},{"name":"DSA-647","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2005/dsa-647"},{"name":"MDKSA-2005:036","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:036"},{"name":"101864","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1"},{"name":"20050118 [USN-63-1] MySQL client vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=110608297217224&w=2"},{"name":"13867","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/13867"},{"name":"12277","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/12277"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://lists.mysql.com/internals/20600"},{"name":"mysql-mysqlaccess-symlink(18922)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18922"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-01-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"CLA-2005:947","tags":["vendor-advisory","x_refsource_CONECTIVA"],"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947"},{"name":"DSA-647","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2005/dsa-647"},{"name":"MDKSA-2005:036","tags":["vendor-advisory","x_refsource_MANDRAKE"],"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:036"},{"name":"101864","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1"},{"name":"20050118 [USN-63-1] MySQL client vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=110608297217224&w=2"},{"name":"13867","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/13867"},{"name":"12277","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/12277"},{"tags":["x_refsource_CONFIRM"],"url":"http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://lists.mysql.com/internals/20600"},{"name":"mysql-mysqlaccess-symlink(18922)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18922"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-0004","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"CLA-2005:947","refsource":"CONECTIVA","url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947"},{"name":"DSA-647","refsource":"DEBIAN","url":"http://www.debian.org/security/2005/dsa-647"},{"name":"MDKSA-2005:036","refsource":"MANDRAKE","url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:036"},{"name":"101864","refsource":"SUNALERT","url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1"},{"name":"20050118 [USN-63-1] MySQL client vulnerability","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=110608297217224&w=2"},{"name":"13867","refsource":"SECUNIA","url":"http://secunia.com/advisories/13867"},{"name":"12277","refsource":"BID","url":"http://www.securityfocus.com/bid/12277"},{"name":"http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html","refsource":"CONFIRM","url":"http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html"},{"name":"http://lists.mysql.com/internals/20600","refsource":"CONFIRM","url":"http://lists.mysql.com/internals/20600"},{"name":"mysql-mysqlaccess-symlink(18922)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18922"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-0004","datePublished":"2005-01-20T05:00:00.000Z","dateReserved":"2005-01-03T00:00:00.000Z","dateUpdated":"2024-08-07T20:57:40.758Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-04-14 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-59","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.23","matchCriteriaId":"03DE5DAF-002F-4151-BDF1-72E7B9D3CA87"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndExcluding":"4.1.10","matchCriteriaId":"DE3B3226-45DB-46F8-A92D-AA15F6652F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndExcluding":"5.0.3","matchCriteriaId":"0B01C1FA-A584-44D8-A7A6-996B3C991F8F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5.0","versionEndExcluding":"5.5.66","matchCriteriaId":"966DE621-0387-4AED-AC5F-67D87391AAA2"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"4","Ordinal":"1","Title":"CVE-2005-0004","CVE":"CVE-2005-0004","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"4","Ordinal":"1","NoteData":"The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.","Type":"Description","Title":"CVE-2005-0004"},{"CveYear":"2005","CveId":"4","Ordinal":"2","NoteData":"2005-01-20","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"4","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}