Vulnerabilities > CVE-2001-0407 - Unspecified vulnerability in Oracle Mysql

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
oracle
nessus
exploit available
NVD
Published: 2001-06-27
Updated: 2024-11-20

Summary

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).

Vulnerable Configurations

Part Description Count
Application
Oracle
51

Exploit-Db

descriptionMySQL 3.20.32 a/3.23.34 Root Operation Symbolic Link File Overwriting Vulnerability. CVE-2001-0407 . Local exploit for unix platform
idEDB-ID:20718
last seen2016-02-02
modified2001-03-18
published2001-03-18
reporterlesha
sourcehttps://www.exploit-db.com/download/20718/
titleMySQL 3.20.32 a/3.23.34 Root Operation Symbolic Link File Overwriting Vulnerability

Nessus

NASL familyDatabases
NASL idMYSQL_FLAWS.NASL
descriptionThe installed version of MySQL is older than version 3.23.36. Such versions are potentially affected by multiple vulnerabilities : - It is possible to modify arbitrary files and gain privileges by creating a database with
last seen2020-06-01
modified2020-06-02
plugin id10626
published2001-03-08
reporterThis script is Copyright (C) 2001-2018 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/10626
titleMySQL < 3.23.36 Multiple Vulnerabilities

References