CVE

Id
93484  
CVE No.
CVE-2016-6664  
Status
Candidate  
Description
mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.  
Phase
Assigned (20160810)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793840 93484 CVE-2016-6664 BUGTRAQ:20161104 MySQL / MariaDB / PerconaDB - Root Privilege Escalation Exploit ( CVE-2016-6664 / CVE-2016-5617 )  View
793841 93484 CVE-2016-6664 URL:http://www.securityfocus.com/archive/1/archive/1/539695/100/0/threaded  View
793842 93484 CVE-2016-6664 EXPLOIT-DB:40679  View
793843 93484 CVE-2016-6664 URL:https://www.exploit-db.com/exploits/40679/  View
793844 93484 CVE-2016-6664 FULLDISC:20161101 MySQL / MariaDB / PerconaDB - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / OCVE-2016-5616]  View
793845 93484 CVE-2016-6664 URL:http://seclists.org/fulldisclosure/2016/Nov/4  View
793846 93484 CVE-2016-6664 MISC:http://legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html  View
793847 93484 CVE-2016-6664 MISC:http://packetstormsecurity.com/files/139491/MySQL-MariaDB-PerconaDB-Root-Privilege-Escalation.html  View
793848 93484 CVE-2016-6664 CONFIRM:https://www.percona.com/blog/2016/11/02/percona-responds-to-cve-2016-6663-and-cve-2016-6664/  View
793849 93484 CVE-2016-6664 CONFIRM:http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
793850 93484 CVE-2016-6664 BID:93612  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4510 JVNDB-2016-005283 Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 Windows および Mac OS X 上で稼動する Adobe Reader および Acrobat には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-6977 93484 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005283.html  View