Description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.

Remediation

References

CVE-2005-0711

Related Vulnerabilities

Python Uncontrolled Resource Consumption Vulnerability (CVE-2022-48564)

WordPress Plugin WP Photo Album Plus Unspecified Vulnerability (7.2.04)

CrushFTP Server Improper Validation of Integrity Check Value Vulnerability (CVE-2023-48795)

WordPress Plugin LeagueManager Multiple SQL Injection Vulnerabilities (3.9.1.1)

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43802)

Severity

Low

Classification

CVE-2005-0711

Tags

Missing Update Known Vulnerabilities