CVE-2004-0457

Published: Sep 28, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Affected (1)

Products: Oracle: Mysql

Oracle

1 product

Mysql

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	Up to 4.0.20

References (12)

http://packages.debian.org/changelogs/pool/main/m/mysql-dfsg/mysql-dfsg_4.0.20-11/changelog

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/p-018.shtml

Source: cve@mitre.org

http://www.debian.org/security/2004/dsa-540

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2004-597.html

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17030

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10693

Source: cve@mitre.org

http://packages.debian.org/changelogs/pool/main/m/mysql-dfsg/mysql-dfsg_4.0.20-11/changelog