CVE-2001-0407 Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).
MediumCVSS 4.6
EPSS 2.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle MySQL | <= 3.23.36 | No fix listed |
References
- 20010318 potential vulnerability of mysqld running with root privileges (can be used as good DoS or r00t expoloit) exploit mailing-list vendor-advisory
- 20010327 MySQL 3.23.36 is relased (fwd) mailing-list patch vendor-advisory
- 2522 vdb-entry
- mysql-dot-directory-traversal(6617) vdb-entry