CVE-2003-0150 MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql t...
HighCVSS 9.0
EPSS 44.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle MySQL | = 3.23.52 | No fix listed |
| oracle MySQL | = 3.23.53 | No fix listed |
| oracle MySQL | = 3.23.53a | No fix listed |
| oracle MySQL | = 3.23.54 | No fix listed |
| oracle MySQL | = 3.23.54a | No fix listed |
| oracle MySQL | = 3.23.55 | No fix listed |
References
- CLA-2003:743 vendor-advisory
- 20030308 MySQL_user_can_be_changed_to_root? mailing-list
- 20030310 Re: MySQL user can be changed to root mailing-list
- 20030318 [OpenPKG-SA-2003.022] OpenPKG Security Advisory (mysql) mailing-list
- 20030318 GLSA: mysql (200303-14) mailing-list
- RHSA-2003:094 vendor-advisory
- DSA-303 vendor-advisory
- VU#203897 third-party-advisory us-government-resource
- ESA-20030324-012 vendor-advisory
- MDKSA-2003:057 vendor-advisory
- RHSA-2003:093 vendor-advisory
- 7052 exploit patch vdb-entry vendor-advisory
- mysql-datadir-root-privileges(11510) vdb-entry
- oval:org.mitre.oval:def:442 signature vdb-entry