← Back

CVE-2005-1636

nvd nist
Published: May 17, 2005Modified: Apr 16, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents.

Affected (22)

Products: Mysql: Mysql · Oracle: Mysql
Mysql
1 product
Mysql
Oracle
1 product
Mysql
Configuration A
22 vulnerable
Vulnerable SoftwareAffected Versions
Mysql
Mysql
Version 5.0.1
Mysql
Version 5.0.2
Mysql
Version 5.0.3
Mysql
Version 5.0.4
Oracle
Mysql
Version 4.0.0
Mysql
Version 4.0.10
Mysql
Version 4.0.11
Mysql
Version 4.0.11 gamma
Mysql
Version 4.0.1
Mysql
Version 4.0.2
Mysql
Version 4.0.3
Mysql
Version 4.0.4
Mysql
Version 4.0.5
Mysql
Version 4.0.5a
Mysql
Version 4.0.6
Mysql
Version 4.0.7
Mysql
Version 4.0.7 gamma
Mysql
Version 4.0.8
Mysql
Version 4.0.8 gamma
Mysql
Version 4.0.9
Mysql
Version 4.0.9 gamma
Mysql
Version 5.0.0 alpha

References (18)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.