Lucene search
FreeBSD0C4D5973-F2AB-11D8-9837-000C41E2CDADHistoryAug 18, 2004 - 12:00 a.m.
mysql -- mysqlhotcopy insecure temporary file creation
2004-08-1800:00:00
vuxml.freebsd.org
12
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
27.1%
According to Christian Hammers:
[mysqlhotcopy created] temporary files in /tmp which
had predictable filenames and such could be used for a
tempfile run attack.
Jeroen van Wolffelaar is credited with discovering the issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | mysql-scripts | <= 3.23.58 | UNKNOWN |
Related
openvas
openvas
FreeBSD Ports: mysql-scripts
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200409-02 (MySQL)
2008-09-24 00:00:00
Debian Security Advisory DSA 540-1 (mysql)
2008-01-17 00:00:00
osv
osv
mysql-dfsg - insecure file creation
2004-08-18 00:00:00
nessus
nessus
ubuntucve
ubuntucve
CVE-2004-0457
2004-09-28 00:00:00
securityvulns
securityvulns
debian
debian
cve
cve
CVE-2004-0457
2004-09-28 04:00:00
CVE-2004-0973
2004-12-23 05:00:00
gentoo
gentoo
MySQL: Insecure temporary file creation in mysqlhotcopy
2004-09-01 00:00:00
redhat
redhat
(RHSA-2004:569) mysql security update
2004-10-20 00:00:00
(RHSA-2004:597) mysql security update
2004-10-20 00:00:00
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
27.1%
Related for 0C4D5973-F2AB-11D8-9837-000C41E2CDAD