MySQL reads configuration options from world-writeable files. This can lead to a remote user gaining elevated privileges.
A message posted to the bugtraq mailing list details a vulnerability affecting versions of MySQL prior to 3.23.56. MySQL would permit users with 'FILE' permissions to create and edit world-writeable configuration files. Upon rebooting the server, MySQL would read these files and be configured to give a remote user elevated privileges.
Exploitation of this vulnerability can lead to a remote user gaining elevated privileges and subsequently gaining control of the MySQL database.
Version 3.23.56 of MySQL resolves this issue. Likewise, you may apply the patch or upgrade supplied by your vendor for this issue.
Thanks to Gufino for reporting this vulnerability.
This document was written by Jason A Rafail.
|Date First Published:||2003-03-18|
|Date Last Updated:||2003-03-20 16:12 UTC|