CVE-2004-0457

Description

The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Risk Information

Base Score

5.9

MODERATE

Vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS Score

Exploitation Probability

0.109

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Mysql 4.0.20	Windows
Multiple vulnerabilities affected in Mysql 4.0.20 (For Linux)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234