CVE

Id
6979  
CVE No.
CVE-2003-0150  
Status
Candidate  
Description
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.  
Phase
Assigned (20030318)  
Votes
NOOP(1) Christey  
Comments
Christey> DEBIAN:DSA-303 | URL:http://www.debian.org/security/2003/dsa-303  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40598 6979 CVE-2003-0150 BUGTRAQ:20030308 MySQL_user_can_be_changed_to_root?  View
40599 6979 CVE-2003-0150 URL:http://marc.info/?l=bugtraq&m=104715840202315&w=2  View
40600 6979 CVE-2003-0150 BUGTRAQ:20030310 Re: MySQL user can be changed to root  View
40601 6979 CVE-2003-0150 URL:http://marc.info/?l=bugtraq&m=104739810523433&w=2  View
40602 6979 CVE-2003-0150 CONECTIVA:CLA-2003:743  View
40603 6979 CVE-2003-0150 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743  View
40604 6979 CVE-2003-0150 DEBIAN:DSA-303  View
40605 6979 CVE-2003-0150 URL:http://www.debian.org/security/2003/dsa-303  View
40606 6979 CVE-2003-0150 ENGARDE:ESA-20030324-012  View
40607 6979 CVE-2003-0150 URL:http://www.linuxsecurity.com/advisories/engarde_advisory-3046.html  View
40608 6979 CVE-2003-0150 REDHAT:RHSA-2003:093  View
40609 6979 CVE-2003-0150 URL:http://www.redhat.com/support/errata/RHSA-2003-093.html  View
40610 6979 CVE-2003-0150 REDHAT:RHSA-2003:094  View
40611 6979 CVE-2003-0150 URL:http://rhn.redhat.com/errata/RHSA-2003-094.html  View
40612 6979 CVE-2003-0150 MANDRAKE:MDKSA-2003:057  View
40613 6979 CVE-2003-0150 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:057  View
40614 6979 CVE-2003-0150 BUGTRAQ:20030318 [OpenPKG-SA-2003.022] OpenPKG Security Advisory (mysql)  View
40615 6979 CVE-2003-0150 URL:http://marc.info/?l=bugtraq&m=104800948128630&w=2  View
40616 6979 CVE-2003-0150 BUGTRAQ:20030318 GLSA: mysql (200303-14)  View
40617 6979 CVE-2003-0150 URL:http://marc.info/?l=bugtraq&m=104802285012750&w=2  View
40618 6979 CVE-2003-0150 CERT-VN:VU#203897  View
40619 6979 CVE-2003-0150 URL:http://www.kb.cert.org/vuls/id/203897  View
40620 6979 CVE-2003-0150 BID:7052  View
40621 6979 CVE-2003-0150 URL:http://www.securityfocus.com/bid/7052  View
40622 6979 CVE-2003-0150 XF:mysql-datadir-root-privileges(11510)  View
40623 6979 CVE-2003-0150 URL:http://xforce.iss.net/xforce/xfdb/11510  View
40624 6979 CVE-2003-0150 OVAL:oval:org.mitre.oval:def:442  View

Related JVN