Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.html | Exploit Vendor Advisory |
http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.html | Patch Vendor Advisory |
http://www.securityfocus.com/bid/2522 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/6617 |
Configurations
Information
Published : 2001-06-26 21:00
Updated : 2019-10-07 09:40
NVD link : CVE-2001-0407
Mitre link : CVE-2001-0407
JSON object : View
CWE
Products Affected
oracle
- mysql