NVD

Id
73297  
Name
CVE-2003-0150  
Description
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the SELECT * INFO OUTFILE operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2003-03-24  
Modified Date
2017-07-10  
Seq
2003-0150  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
377531 73297 CVE-2003-0150 CLA-2003:743  View
377532 73297 CVE-2003-0150 20030308 MySQL_user_can_be_changed_to_root?  View
377533 73297 CVE-2003-0150 20030310 Re: MySQL user can be changed to root  View
377534 73297 CVE-2003-0150 20030318 [OpenPKG-SA-2003.022] OpenPKG Security Advisory (mysql)  View
377535 73297 CVE-2003-0150 20030318 GLSA: mysql (200303-14)  View
377536 73297 CVE-2003-0150 oval:org.mitre.oval:def:442  View
377537 73297 CVE-2003-0150 RHSA-2003:094  View
377538 73297 CVE-2003-0150 DSA-303  View
377539 73297 CVE-2003-0150 VU#203897  View
377540 73297 CVE-2003-0150 ESA-20030324-012  View
377541 73297 CVE-2003-0150 MDKSA-2003:057  View
377542 73297 CVE-2003-0150 RHSA-2003:093  View
377543 73297 CVE-2003-0150 7052  View
377544 73297 CVE-2003-0150 mysql-datadir-root-privileges(11510)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63345 JVNDB-2003-000071 MySQL の不正な "SELECT * INTO OUTFILE" 構文処理による権限昇格の脆弱性 MySQL には、サーバーのファイルを読み書き可能な FILE 権限が与えられている MySQL ユーザにより、設定ファイル (デフォルトでは /etc/my.cnf) を上書きされてしまう脆弱性が存在します。 CVE-2003-0150 6978 CVE-2003-0150 73297 9 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000071.html 2003-03-08 2007-04-01 View