Lucene search
GoogleOSV:CVE-2020-7221HistoryFeb 04, 2020 - 5:15 p.m.
CVE-2020-7221
2020-02-0417:15:13
Google
osv.dev
4
mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool. NOTE: this does not affect the Oracle MySQL product, which implements mysql_install_db differently.
Related
cve
cve
CVE-2020-7221
2020-02-04 17:15:13
openvas
openvas
MariaDB 10.4.7 - 10.4.11 Privilege Escalation Vulnerability - Linux
2020-02-06 00:00:00
MariaDB 10.4.7 - 10.4.11 Privilege Escalation Vulnerability (Linux)
2020-02-06 00:00:00
osv
osv
BIT-mysql-client-2020-7221
2024-03-06 11:09:41
BIT-2020-7221
2023-11-06 07:32:19
BIT-mariadb-2020-7221
2024-03-06 11:07:58
redhatcve
redhatcve
CVE-2020-7221
2020-02-13 20:44:20
nvd
nvd
CVE-2020-7221
2020-02-04 17:15:13
cvelist
cvelist
CVE-2020-7221
2020-02-04 16:57:00
prion
prion
Privilege escalation
2020-02-04 17:15:00
ubuntucve
ubuntucve
CVE-2020-7221
2020-02-04 00:00:00
mariadbunix
mariadbunix
CVE-2020-7221
2020-02-04 17:15:00
debiancve
debiancve
CVE-2020-7221
2020-02-04 17:15:13
nessus
nessus
MariaDB 10.4.0 < 10.4.12 A Vulnerability
2020-02-13 00:00:00
thn
thn
Why Database Patching Best Practice Just Doesn't Work and How to Fix It
2021-10-18 16:00:00