Description

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

Remediation

References

CVE-2005-0004

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Mailchimp Security Bypass (2.1.3)

Piwigo URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-9464)

SharePoint CVE-2018-8161 Vulnerability (CVE-2018-8161)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-61638)

WordPress Plugin NextGEN Gallery-WordPress Gallery 'nggallery-manage-gallery' HTML Injection (0.96)

Severity

Medium

Classification

CVE-2005-0004 CWE-59

Tags

Missing Update Known Vulnerabilities