Bug 119442 - CAN-2004-0381 mysqlbug temporary file vulnerability
CAN-2004-0381 mysqlbug temporary file vulnerability
Product: Red Hat Enterprise Linux 3
Classification: Red Hat
Component: mysql (Show other bugs)
All Linux
low Severity medium
: ---
: ---
Assigned To: Tom Lane
David Lawrence
: Security
: 125992 (view as bug list)
Depends On:
  Show dependency treegraph
Reported: 2004-03-30 10:45 EST by Mark J. Cox (Product Security)
Modified: 2013-07-02 23:00 EDT (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2004-10-20 15:41:28 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Mark J. Cox (Product Security) 2004-03-30 10:45:06 EST
mysqlbug script has temporary file vulnerability (uses /tmp) which
could allow an attacker to use a symlink attack to overwrite arbitrary
files as the person running mysqlbug.

Reported to bugtraq on Mar24th, minor issue to be fixed with next
mysql update.
Comment 1 Robert Scheck 2004-06-14 18:19:06 EDT
Mark, you only marked CAN-2004-0381 for this bug, but the vulnerability 
of CAN-2004-0388 is there, too.

Both CANs should be fixed with the patch from attachment #101129 [details]
Comment 2 Tom Lane 2004-06-15 15:31:01 EDT
*** Bug 125991 has been marked as a duplicate of this bug. ***
Comment 3 Tom Lane 2004-06-15 15:32:08 EDT
*** Bug 125992 has been marked as a duplicate of this bug. ***
Comment 4 Robert Scheck 2004-06-15 16:26:31 EDT
Sorry Tom, for making that additional unnecessary work (for me and for
you), but it seems so, that there are multiple/different views how a 
bug has to be marked in bugzilla for different distributions &  
versions, but okay...the onliest I would be happy, is to have those 2 
CANs fixed at all 4 currently supported distributions/versions at all 
needed architectures (RHEL 2.1, 3 and FC 1, 2) ;-)

Most of your colleagues assign for each affected distribution version 
a separate bug, so I followed this example - sorry again!
Comment 5 Mark J. Cox (Product Security) 2004-06-16 09:43:21 EDT
Reopening bug 125991; we usually do keep RHEL and FC separate; but not
split up the individual versions of RHEL/FC.
Comment 6 Tom Lane 2004-10-06 18:19:57 EDT
Fix is in mysql-3.23.58-2.2, slated for RHEL3 U4, and also in
3.23.58-11 and beyond for FC3.
Comment 7 Josh Bressers 2004-10-20 15:41:28 EDT
An errata has been issued which should help the problem 
described in this bug report. This report is therefore being 
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files, 
please follow the link below. You may reopen this bug report 
if the solution does not work for you.


Note You need to log in before you can comment on or make changes to this bug.