| Package | Affected versions | Patched versions |
|---|---|---|
| mysql | = 5.0.1= 5.0.2= 5.0.3= 5.0.4 | |
| mysql | = 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.2= 4.0.3= 4.0.4= 4.0.5= 4.0.5a= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 5.0.0 |
mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free