Description
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | mysql | 3.23.49-8.9 | DSA-647-1 |
Advisories 1
- DSA-647-1 mysql - insecure temporary files Debian Security (DSA / DLA) · Mar 9, 2026
References
- CLA-2005:947 vendor-advisory
- DSA-647 vendor-advisory
- MDKSA-2005:036 vendor-advisory
- 101864 vendor-advisory
- 20050118 [USN-63-1] MySQL client vulnerability mailing-list
- 13867 third-party-advisory
- 12277 vdb-entry
- http://mysql.osuosl.org/doc/mysql/en/News-4.1.10.html
- http://lists.mysql.com/internals/20600
- mysql-mysqlaccess-symlink(18922) vdb-entry