CVE-2005-0711

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.70% chance of exploitation in the next 30 days, 76th percentile

Published

2005-03-11

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/25211

References

• CVE Record
• NVD entry

Related

• CVE-2005-0710
• CVE-2005-0713
• CVE-2005-0709
• CVE-2005-0716
• CVE-2005-0701
• CVE-2005-0720