exploits , vulnerabilities , articles , MySQL MYSQLD_Multi Insecure Temporary File Creation Vulnerability

Title	MySQL MYSQLD_Multi Insecure Temporary File Creation Vulnerability
Published	2004-04-14-12:00AM
Updated	2005-03-25-07:17PM
Class	Design Error
CVE	CAN-2004-0388
Remote	No
Local	Yes
Credit	The discoverer of this vulnerability is currently unknown.
Vulnerable	RedHat Fedora Core1 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux AS 3 RedHat Desktop 3.0 MySQL AB MySQL 4.1 .0alpha MySQL AB MySQL 4.1 .00 MySQL AB MySQL 4.0.18 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Linux Mandrake 10.0 MandrakeSoft Linux Mandrake 10.0 amd64 MySQL AB MySQL 4.0.15 Conectiva Linux 10.0 MandrakeSoft Linux Mandrake 9.2 MandrakeSoft Linux Mandrake 9.2 amd64 OpenPKG OpenPKG Current MySQL AB MySQL 4.0.14 OpenPKG OpenPKG Current OpenPKG OpenPKG 1.3 Trustix Secure Linux 2.0 MySQL AB MySQL 4.0.13 MySQL AB MySQL 4.0.12 MySQL AB MySQL 4.0.11 gamma MySQL AB MySQL 4.0.11 MandrakeSoft Linux Mandrake 9.1 MandrakeSoft Linux Mandrake 9.1 ppc MySQL AB MySQL 4.0.10 MySQL AB MySQL 4.0.9 gamma MySQL AB MySQL 4.0.9 MySQL AB MySQL 4.0.8 gamma MySQL AB MySQL 4.0.8 MySQL AB MySQL 4.0.7 gamma MySQL AB MySQL 4.0.7 MySQL AB MySQL 4.0.6 MySQL AB MySQL 4.0.5 a MySQL AB MySQL 4.0.5 MySQL AB MySQL 4.0.4 MySQL AB MySQL 4.0.3 MySQL AB MySQL 4.0.2 MySQL AB MySQL 4.0.1 MySQL AB MySQL 4.0 .0 MySQL AB MySQL 3.23.58 Conectiva Linux 9.0 RedHat Enterprise Linux AS 2.1 RedHat Enterprise Linux ES 2.1 RedHat Enterprise Linux WS 2.1 RedHat Fedora Core2 RedHat Linux Advanced Work Station 2.1 Sun Linux 5.0 Sun Linux 5.0.3 Sun Linux 5.0.5 Sun Linux 5.0.6 Sun Linux 5.0.7 Turbolinux Appliance Server 1.0 Hosting Edition Turbolinux Appliance Server 1.0 Workgroup Edition Turbolinux Appliance Server Hosting Edition 1.0 Turbolinux Appliance Server Workgroup Edition 1.0 Turbolinux Home Turbolinux Turbolinux Desktop 10.0 Turbolinux Turbolinux Server 8.0 Turbolinux Turbolinux Workstation 8.0 MySQL AB MySQL 3.23.56 MySQL AB MySQL 3.23.55 OpenPKG OpenPKG Current Trustix Secure Linux 1.5 MySQL AB MySQL 3.23.54 a OpenPKG OpenPKG Current OpenPKG OpenPKG 1.2 RedHat Linux 9.0 i386 MySQL AB MySQL 3.23.54 Sun Cobalt RaQ 550 Trustix Secure Linux 1.5 MySQL AB MySQL 3.23.53 a MySQL AB MySQL 3.23.53 OpenPKG OpenPKG Current Sun Cobalt Qube 3 MySQL AB MySQL 3.23.52 Conectiva Linux Enterprise Edition 1.0 MandrakeSoft Linux Mandrake 9.0 OpenPKG OpenPKG 1.1 RedHat Linux 8.0 RedHat Linux 8.0 i386 S.u.S.E. Linux 8.1 Trustix Secure Linux 1.5 MySQL AB MySQL 3.23.51 MySQL AB MySQL 3.23.50 MySQL AB MySQL 3.23.49 Debian Linux 3.0 alpha Debian Linux 3.0 arm Debian Linux 3.0 hppa Debian Linux 3.0 ia32 Debian Linux 3.0 ia64 Debian Linux 3.0 m68k Debian Linux 3.0 mips Debian Linux 3.0 mipsel Debian Linux 3.0 ppc Debian Linux 3.0 s/390 Debian Linux 3.0 sparc RedHat Linux 7.3 RedHat Linux 7.3 i386 RedHat Linux 7.3 i686 MySQL AB MySQL 3.23.48 S.u.S.E. Linux 8.0 S.u.S.E. Linux 8.0 i386 MySQL AB MySQL 3.23.47 MandrakeSoft Linux Mandrake 8.2 MandrakeSoft Linux Mandrake 8.2 ppc MySQL AB MySQL 3.23.46 Conectiva Linux 8.0 OpenPKG OpenPKG 1.0 MySQL AB MySQL 3.23.45 MySQL AB MySQL 3.23.44 S.u.S.E. Linux 7.3 S.u.S.E. Linux 7.3 i386 S.u.S.E. Linux 7.3 ppc S.u.S.E. Linux 7.3 sparc MySQL AB MySQL 3.23.43 MySQL AB MySQL 3.23.42 MySQL AB MySQL 3.23.41 MandrakeSoft Linux Mandrake 8.1 MandrakeSoft Linux Mandrake 8.1 ia64 RedHat Linux 7.2 RedHat Linux 7.2 alpha RedHat Linux 7.2 ia64 MySQL AB MySQL 3.23.40 MySQL AB MySQL 3.23.39 HP SCM 3.0 MySQL AB MySQL 3.23.38 MySQL AB MySQL 3.23.37 S.u.S.E. Linux 7.2 S.u.S.E. Linux 7.2 i386 MySQL AB MySQL 3.23.36 Conectiva Linux 6.0 Conectiva Linux 7.0 EnGarde Secure Linux 1.0.1 MandrakeSoft Linux Mandrake 8.0 MandrakeSoft Linux Mandrake 8.0 ppc RedHat Linux 7.1 RedHat Linux 7.1 i386 RedHat Linux 7.1 i586 RedHat Linux 7.1 i686 RedHat Linux 7.1 ia64 MySQL AB MySQL 3.23.34 Debian Linux 2.2 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 powerpc Debian Linux 2.2 sparc FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 4.2 HP HPUX 11.0 HP HPUX 11.11 IBM AIX 4.3.2 IBM AIX 4.3.3 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 OpenBSD OpenBSD 2.6 OpenBSD OpenBSD 2.7 OpenBSD OpenBSD 2.8 RedHat Linux 5.2 alpha RedHat Linux 5.2 i386 RedHat Linux 5.2 sparc RedHat Linux 6.2 alpha RedHat Linux 6.2 i386 RedHat Linux 6.2 sparc RedHat Linux 7.0 alpha RedHat Linux 7.0 i386 S.u.S.E. Linux 6.4 S.u.S.E. Linux 7.0 S.u.S.E. Linux 7.1 Sun Solaris 2.6 Sun Solaris 2.6 _x86 Sun Solaris 7.0 Sun Solaris 7.0 _x86 Sun Solaris 8.0 Sun Solaris 8.0 _x86 MySQL AB MySQL 3.23.33 S.u.S.E. Linux 7.1 S.u.S.E. Linux 7.1 alpha S.u.S.E. Linux 7.1 ppc S.u.S.E. Linux 7.1 sparc S.u.S.E. Linux 7.1 x86 MySQL AB MySQL 3.23.32 Wirex Immunix OS 7 MySQL AB MySQL 3.23.31 MandrakeSoft Linux Mandrake 7.2 MandrakeSoft Single Network Firewall 7.2 MySQL AB MySQL 3.23.30 MySQL AB MySQL 3.23.29 MySQL AB MySQL 3.23.28 gamma MySQL AB MySQL 3.23.28 MySQL AB MySQL 3.23.27 MySQL AB MySQL 3.23.26 RedHat Linux 7.1 RedHat Linux 7.1 alpha RedHat Linux 7.1 ia64 MySQL AB MySQL 3.23.25 MySQL AB MySQL 3.23.24 MySQL AB MySQL 3.23.23 MySQL AB MySQL 3.23.22 RedHat Linux 7.0 RedHat Linux 7.0 alpha RedHat Linux 7.0 sparc MySQL AB MySQL 3.23.10 MySQL AB MySQL 3.23.9 MySQL AB MySQL 3.23.8 MySQL AB MySQL 3.23.5 MandrakeSoft Corporate Server 2.1 MandrakeSoft Corporate Server 2.1 x86_64 Trustix Secure Linux 1.5 MySQL AB MySQL 3.23.4 MySQL AB MySQL 3.23.3 FreeBSD FreeBSD 4.0 FreeBSD FreeBSD 5.0 MySQL AB MySQL 3.23.2 MySQL AB MySQL 3.22.32 Debian Linux 2.2 68k Debian Linux 2.2 alpha Debian Linux 2.2 arm Debian Linux 2.2 IA32 Debian Linux 2.2 powerpc Debian Linux 2.2 sparc MySQL AB MySQL 3.22.30 MySQL AB MySQL 3.22.29 MySQL AB MySQL 3.22.28 MySQL AB MySQL 3.22.27 MySQL AB MySQL 3.22.26 MySQL AB MySQL 3.20.32 a Gentoo Linux 1.4 _rc3 Gentoo Linux 1.4 _rc2 Gentoo Linux 1.4 _rc1 Gentoo Linux 1.4 Gentoo Linux 1.2 Gentoo Linux 1.1 a Gentoo Linux 0.7 Gentoo Linux 0.5
Not Vulnerable
Code	There is no exploit required.
TXT

Vulnerabilities - newest 10 RSS | More

2008-12-04 Rae Media Web Based Contact Management Login SQL Injection Vulnerability
2008-12-04 Nagios External Commands and Adaptive Commands Unspecified Vulnerability
2008-12-04 Z1Exchange SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 mvnForum Cross Site Scripting Vulnerability
2008-12-04 i-Net Solution Orkut Clone SQL Injection and Cross Site Scripting Vulnerabilities
2008-12-04 Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
2008-12-04 Jbook SQL Injection Vulnerability
2008-12-04 SquirrelMail Malformed HTML Mail Message HTML Injection Vulnerability
2008-12-04 HP-UX Unspecified Local Denial Of Service Vulnerability
2008-12-04 Netrw Vim Script Information Disclosure Vulnerability