Lucene search
GoogleOSV:BIT-2020-7221HistoryNov 06, 2023 - 7:32 a.m.
BIT-2020-7221
2023-11-0607:32:19
Google
osv.dev
20
mariadb
privilege escalation
mysql_install_db
symlink attack
chown
chmod
auth_pam_tool_dir
oraclemysql
mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool. NOTE: this does not affect the Oracle MySQL product, which implements mysql_install_db differently.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mysql-client | ge | 10.4.7 | |
| mysql-client | lt | 10.4.11 |
Related
ubuntucve
ubuntucve
CVE-2020-7221
2020-02-04 00:00:00
mariadbunix
mariadbunix
CVE-2020-7221
2020-02-04 17:15:00
osv
osv
CVE-2020-7221
2020-02-04 17:15:13
BIT-mysql-client-2020-7221
2024-03-06 11:09:41
BIT-mariadb-2020-7221
2024-03-06 11:07:58
prion
prion
Privilege escalation
2020-02-04 17:15:00
cve
cve
CVE-2020-7221
2020-02-04 17:15:13
openvas
openvas
MariaDB 10.4.7 - 10.4.11 Privilege Escalation Vulnerability - Linux
2020-02-06 00:00:00
MariaDB 10.4.7 - 10.4.11 Privilege Escalation Vulnerability (Linux)
2020-02-06 00:00:00
redhatcve
redhatcve
CVE-2020-7221
2020-02-13 20:44:20
nvd
nvd
CVE-2020-7221
2020-02-04 17:15:13
cvelist
cvelist
CVE-2020-7221
2020-02-04 16:57:00
debiancve
debiancve
CVE-2020-7221
2020-02-04 17:15:13
thn
thn
Why Database Patching Best Practice Just Doesn't Work and How to Fix It
2021-10-18 16:00:00
nessus
nessus
MariaDB 10.4.0 < 10.4.12 A Vulnerability
2020-02-13 00:00:00