FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0381

This CVE name corresponds to:

Entered	Topic
2004-04-16	MySQL insecure temporary file creation (mysqlbug)

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0381 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0381
Phase	Assigned(20040405)

Description

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.

References

Source	Reference
BUGTRAQ	20040324 mysqlbug tmpfile/symlink vulnerability.
DEBIAN	DSA-483
GENTOO	GLSA-200405-20
MANDRAKE	MDKSA-2004:034
REDHAT	RHSA-2004:569
REDHAT	RHSA-2004:597
BUGTRAQ	20040414 [OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql)
CIAC	P-018
BID	9976
OVAL	oval:org.mitre.oval:def:11557
XF	mysql-mysqlbug-symlink(15617)