Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MySQL Other Vulnerability - CVE-2003-0150 - Vulnerability Database
MySQL

MySQL Other Vulnerability - CVE-2003-0150

Critical
Reference: CVE-2003-0150
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2003-0150
Title: MySQL Other Vulnerability
Overview:

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the quotSELECT INFO OUTFILEquot operator to overwrite a configuration file and cause mysql to run as root upon restart as demonstrated by modifying my.cnf.