Lucene search

CVE-2016-6664

🗓️ 13 Dec 2016 00:00:00Reported by ubuntu.comType

Vulnerability in multiple MySQL versions allows local users to gain root privileges via symlink attack on error logs

Reporter	Title	Published	Views	Family All 115
Prion	Design/Logic Flaw	25 Oct 201614:31	–	prion
Prion	Design/Logic Flaw	13 Dec 201621:59	–	prion
CVE	CVE-2016-5617	25 Oct 201614:31	–	cve
CVE	CVE-2016-6664	13 Dec 201621:59	–	cve
NVD	CVE-2016-5617	25 Oct 201614:31	–	nvd
NVD	CVE-2016-6664	13 Dec 201621:59	–	nvd
Tenable Nessus	MariaDB Server 10.0.x < 10.0.28 Multiple Vulnerabilities	4 Nov 201600:00	–	nessus
Tenable Nessus	FreeBSD : MySQL -- multiple vulnerabilities (22373c43-d728-11e6-a9a5-b499baebfeaf)	16 Jan 201700:00	–	nessus
Tenable Nessus	CentOS 7 : mariadb (CESA-2017:2192)	25 Aug 201700:00	–	nessus
Tenable Nessus	Scientific Linux Security Update : mariadb on SL7.x x86_64 (20170801)	22 Aug 201700:00	–	nessus

Source	Link
legalhackers	www.legalhackers.com/advisories/MySQL-Maria-Percona-RootPrivEsc-CVE-2016-6664-5617-Exploit.html
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-6664
launchpad	www.launchpad.net/bugs/cve/CVE-2016-6664
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-6664

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	16.04	noarch	mariadb-10.0	10.0.29-0ubuntu0.16.04.1	UNKNOWN
ubuntu	16.10	noarch	mariadb-10.0	10.0.29-0ubuntu0.16.10.1	UNKNOWN
ubuntu	12.04	noarch	mysql-5.5	5.5.52-0ubuntu0.12.04.1	UNKNOWN
ubuntu	14.04	noarch	mysql-5.5	5.5.52-0ubuntu0.14.04.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2016 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS26.9

CVSS37.0

EPSS0.118