CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-1636

mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitrary SQL commands by modifying the file's contents.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 4.1%

CVSS Severity

CVSS v2 Score 4.6

References

Products affected by CVE-2005-1636

Mysql » Mysql » Version: 5.0.1

cpe:2.3:a:mysql:mysql:5.0.1
Mysql » Mysql » Version: 5.0.2

cpe:2.3:a:mysql:mysql:5.0.2
Mysql » Mysql » Version: 5.0.3

cpe:2.3:a:mysql:mysql:5.0.3
Mysql » Mysql » Version: 5.0.4

cpe:2.3:a:mysql:mysql:5.0.4
Oracle » Mysql » Version: 4.0.0

cpe:2.3:a:oracle:mysql:4.0.0
Oracle » Mysql » Version: 4.0.1

cpe:2.3:a:oracle:mysql:4.0.1
Oracle » Mysql » Version: 4.0.10

cpe:2.3:a:oracle:mysql:4.0.10
Oracle » Mysql » Version: 4.0.11

cpe:2.3:a:oracle:mysql:4.0.11
Oracle » Mysql » Version: 4.0.2

cpe:2.3:a:oracle:mysql:4.0.2
Oracle » Mysql » Version: 4.0.3

cpe:2.3:a:oracle:mysql:4.0.3
Oracle » Mysql » Version: 4.0.4

cpe:2.3:a:oracle:mysql:4.0.4
Oracle » Mysql » Version: 4.0.5

cpe:2.3:a:oracle:mysql:4.0.5
Oracle » Mysql » Version: 4.0.5a

cpe:2.3:a:oracle:mysql:4.0.5a
Oracle » Mysql » Version: 4.0.6

cpe:2.3:a:oracle:mysql:4.0.6
Oracle » Mysql » Version: 4.0.7

cpe:2.3:a:oracle:mysql:4.0.7
Oracle » Mysql » Version: 4.0.8

cpe:2.3:a:oracle:mysql:4.0.8
Oracle » Mysql » Version: 4.0.9

cpe:2.3:a:oracle:mysql:4.0.9
Oracle » Mysql » Version: 5.0.0

cpe:2.3:a:oracle:mysql:5.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-1636

Products

Pricing

Contact Us