Evil-DB LogoEvil-DB
← All CVEs

CVE-2003-0150

high · 9

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

9
CVSS
44.8%
EPSS (exploit prob.)
99th
EPSS percentile
2003-03-24
Published

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

VendorProductAffected versions
oraclemysql3.23.52
oraclemysql3.23.53
oraclemysql3.23.53a
oraclemysql3.23.54
oraclemysql3.23.54a
oraclemysql3.23.55

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0150