Executive Summary

Informations
Name	CVE-2004-0381	First vendor Publication	2004-05-04
Vendor	Cve	Last vendor Modification	2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:N)
Cvss Base Score	2.1	Attack Range	Local
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	3.9	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0381

OVAL Definitions

 

Definition Id: oval:org.mitre.oval:def:11557
Oval ID:	oval:org.mitre.oval:def:11557
Title:	mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Description:	mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2004-0381	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3	Product(s):
Definition Synopsis:
RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section mysql is earlier than 0:3.23.58-2.3 AND mysql-devel is earlier than 0:3.23.58-2.3 AND mysql-bench is earlier than 0:3.23.58-2.3

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mysql Mysql cpe:/a:mysql:mysql:4.1.0.0 cpe:/a:mysql:mysql:4.1.0:alpha cpe:/a:mysql:mysql:4.0.9:gamma cpe:/a:mysql:mysql:4.0.9 cpe:/a:mysql:mysql:4.0.8:gamma cpe:/a:mysql:mysql:4.0.8 cpe:/a:mysql:mysql:4.0.7:gamma cpe:/a:mysql:mysql:4.0.7 cpe:/a:mysql:mysql:4.0.6 cpe:/a:mysql:mysql:4.0.5a cpe:/a:mysql:mysql:4.0.5 cpe:/a:mysql:mysql:4.0.4 cpe:/a:mysql:mysql:4.0.3 cpe:/a:mysql:mysql:4.0.2 cpe:/a:mysql:mysql:4.0.18 cpe:/a:mysql:mysql:4.0.15 cpe:/a:mysql:mysql:4.0.14 cpe:/a:mysql:mysql:4.0.13 cpe:/a:mysql:mysql:4.0.12 cpe:/a:mysql:mysql:4.0.11:gamma cpe:/a:mysql:mysql:4.0.11 cpe:/a:mysql:mysql:4.0.10 cpe:/a:mysql:mysql:4.0.1 cpe:/a:mysql:mysql:4.0.0 cpe:/a:mysql:mysql:3.23.9 cpe:/a:mysql:mysql:3.23.8 cpe:/a:mysql:mysql:3.23.58 cpe:/a:mysql:mysql:3.23.56 cpe:/a:mysql:mysql:3.23.55 cpe:/a:mysql:mysql:3.23.54a cpe:/a:mysql:mysql:3.23.54 cpe:/a:mysql:mysql:3.23.53a cpe:/a:mysql:mysql:3.23.53 cpe:/a:mysql:mysql:3.23.52 cpe:/a:mysql:mysql:3.23.51 cpe:/a:mysql:mysql:3.23.50 cpe:/a:mysql:mysql:3.23.5 cpe:/a:mysql:mysql:3.23.49 cpe:/a:mysql:mysql:3.23.48 cpe:/a:mysql:mysql:3.23.47 cpe:/a:mysql:mysql:3.23.46 cpe:/a:mysql:mysql:3.23.45 cpe:/a:mysql:mysql:3.23.44 cpe:/a:mysql:mysql:3.23.43 cpe:/a:mysql:mysql:3.23.42 cpe:/a:mysql:mysql:3.23.41 cpe:/a:mysql:mysql:3.23.40 cpe:/a:mysql:mysql:3.23.39 cpe:/a:mysql:mysql:3.23.38 cpe:/a:mysql:mysql:3.23.37 cpe:/a:mysql:mysql:3.23.36 cpe:/a:mysql:mysql:3.23.34 cpe:/a:mysql:mysql:3.23.33 cpe:/a:mysql:mysql:3.23.32 cpe:/a:mysql:mysql:3.23.31 cpe:/a:mysql:mysql:3.23.30 cpe:/a:mysql:mysql:3.23.3 cpe:/a:mysql:mysql:3.23.29 cpe:/a:mysql:mysql:3.23.28 cpe:/a:mysql:mysql:3.23.28:gamma cpe:/a:mysql:mysql:3.23.27 cpe:/a:mysql:mysql:3.23.26 cpe:/a:mysql:mysql:3.23.25 cpe:/a:mysql:mysql:3.23.24 cpe:/a:mysql:mysql:3.23.23 cpe:/a:mysql:mysql:3.23.22 cpe:/a:mysql:mysql:3.23.2 cpe:/a:mysql:mysql:3.23.10 cpe:/a:mysql:mysql:3.22.32 cpe:/a:mysql:mysql:3.22.30 cpe:/a:mysql:mysql:3.22.29 cpe:/a:mysql:mysql:3.22.28 cpe:/a:mysql:mysql:3.22.27 cpe:/a:mysql:mysql:3.22.26 cpe:/a:mysql:mysql:3.20.32a	75

Open Source Vulnerability Database (OSVDB)

id	Description
6420	MySQL mysqlbug Symlink Arbitrary File Overwrite

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/9976
BUGTRAQ	http://marc.theaimsgroup.com/?l=bugtraq&m=108023246916294&w=2 http://marc.theaimsgroup.com/?l=bugtraq&m=108206802810402&w=2
CIAC	http://www.ciac.org/ciac/bulletins/p-018.shtml
DEBIAN	http://www.debian.org/security/2004/dsa-483
GENTOO	http://security.gentoo.org/glsa/glsa-200405-20.xml
MANDRAKE	http://www.mandriva.com/security/advisories?name=MDKSA-2004:034
REDHAT	http://www.redhat.com/support/errata/RHSA-2004-569.html http://www.redhat.com/support/errata/RHSA-2004-597.html
XF	http://xforce.iss.net/xforce/xfdb/15617

Alert History

Date	Informations
2013-05-11 11:41:25	Multiple Updates