Read the docs
TI-2004-00348 Aliases CVE-2004-0381GHSA-q6cx-wgqr-cmmx

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on…

Priority LOW 12Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.

Why it matters now

EPSS 0.00628 50th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 75

CPEVersionsRoleVendor
cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableMysql
cpe:2.3:a:oracle:mysql:3.20.32a:*:*:*:*:*:*:*3.20.32aVulnerableOracle
cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*3.22.26VulnerableOracle
cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*3.22.27VulnerableOracle
cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*3.22.28VulnerableOracle
cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*3.22.29VulnerableOracle
cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*3.22.30VulnerableOracle
cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*3.22.32VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*3.23.2VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*3.23.3VulnerableOracle
  • cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Mysql
  • cpe:2.3:a:oracle:mysql:3.20.32a:*:*:*:*:*:*:* Versions 3.20.32a Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:* Versions 3.22.26 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:* Versions 3.22.27 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:* Versions 3.22.28 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:* Versions 3.22.29 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:* Versions 3.22.30 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:* Versions 3.22.32 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:* Versions 3.23.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:* Versions 3.23.3 Vulnerable ·Oracle
Show 65 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*3.23.5VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*3.23.8VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*3.23.9VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*3.23.10VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:*3.23.22VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*3.23.23VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*3.23.24VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*3.23.25VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*3.23.26VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*3.23.27VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*3.23.28VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:*3.23.28 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*3.23.29VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*3.23.30VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*3.23.31VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:*3.23.32VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:*3.23.33VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*3.23.34VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*3.23.36VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*3.23.37VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*3.23.38VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*3.23.39VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*3.23.40VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*3.23.41VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*3.23.42VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*3.23.43VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*3.23.44VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*3.23.45VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*3.23.46VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*3.23.47VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*3.23.48VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*3.23.49VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*3.23.50VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*3.23.51VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*3.23.52VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*3.23.53VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*3.23.53aVulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*3.23.54VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.54a:*:*:*:*:*:*:*3.23.54aVulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:*3.23.55VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:*3.23.56VulnerableOracle
cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:*3.23.58VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*4.0.2VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*4.0.3VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*4.0.4VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*4.0.5VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*4.0.5aVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*4.0.6VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*4.0.7VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*4.0.7 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*4.0.8VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*4.0.8 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*4.0.9VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*4.0.9 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*4.0.10VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*4.0.11VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*4.0.11 gammaVulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*4.0.12VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*4.0.13VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*4.0.14VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*4.0.15VulnerableOracle
cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*4.0.18VulnerableOracle
cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*4.1.0 alphaVulnerableOracle
  • cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:* Versions 3.23.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:* Versions 3.23.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:* Versions 3.23.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:* Versions 3.23.10 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:* Versions 3.23.22 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:* Versions 3.23.23 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:* Versions 3.23.24 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:* Versions 3.23.25 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:* Versions 3.23.26 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:* Versions 3.23.27 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:* Versions 3.23.28 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:* Versions 3.23.28 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:* Versions 3.23.29 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:* Versions 3.23.30 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:* Versions 3.23.31 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:* Versions 3.23.32 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:* Versions 3.23.33 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:* Versions 3.23.34 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:* Versions 3.23.36 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:* Versions 3.23.37 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:* Versions 3.23.38 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:* Versions 3.23.39 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:* Versions 3.23.40 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:* Versions 3.23.41 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:* Versions 3.23.42 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:* Versions 3.23.43 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:* Versions 3.23.44 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:* Versions 3.23.45 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:* Versions 3.23.46 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:* Versions 3.23.47 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:* Versions 3.23.48 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:* Versions 3.23.49 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:* Versions 3.23.50 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:* Versions 3.23.51 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:* Versions 3.23.52 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:* Versions 3.23.53 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:* Versions 3.23.53a Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:* Versions 3.23.54 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.54a:*:*:*:*:*:*:* Versions 3.23.54a Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:* Versions 3.23.55 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:* Versions 3.23.56 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:* Versions 3.23.58 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:* Versions 4.0.5a Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:* Versions 4.0.7 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:* Versions 4.0.8 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:* Versions 4.0.9 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:* Versions 4.0.9 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:* Versions 4.0.10 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:* Versions 4.0.11 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:* Versions 4.0.11 gamma Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:* Versions 4.0.12 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:* Versions 4.0.13 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:* Versions 4.0.14 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:* Versions 4.0.15 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:* Versions 4.0.18 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:* Versions 4.1.0 alpha Vulnerable ·Oracle

Remediation

Red Hat 2 advisories

  • RHSA-2004:569 Released 2004-10-20 · Red Hat rating Low
    mysql security update
    • Red Hat Desktop version 3 mysql-3.23.58-2.3, mysql-3.23.58-2.3.i386, mysql-bench-3.23.58-2.3 +3
    • Red Hat Enterprise Linux AS version 3 mysql-3.23.58-2.3, mysql-3.23.58-2.3.i386, mysql-3.23.58-2.3.ia64 +9
    • Red Hat Enterprise Linux ES version 3 mysql-3.23.58-2.3, mysql-3.23.58-2.3.i386, mysql-3.23.58-2.3.ia64 +6
    • Red Hat Enterprise Linux WS version 3 mysql-3.23.58-2.3, mysql-3.23.58-2.3.i386, mysql-3.23.58-2.3.ia64 +6
  • RHSA-2004:597 Released 2004-10-20 · Red Hat rating Important
    mysql security update
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
    • Red Hat Enterprise Linux ES version 2.1
    • Red Hat Enterprise Linux WS version 2.1
    • Red Hat Linux Advanced Workstation 2.1

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2004:569
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2004:597
Red Hat Enterprise Linux AS version 3Fixed RHSA-2004:569
Red Hat Enterprise Linux ES version 2.1Fixed RHSA-2004:597
Red Hat Enterprise Linux ES version 3Fixed RHSA-2004:569
Red Hat Enterprise Linux WS version 2.1Fixed RHSA-2004:597
Red Hat Enterprise Linux WS version 3Fixed RHSA-2004:569
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2004:597

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-0381
  2. 2026-10-03 Alias added: GHSA-q6cx-wgqr-cmmx
  3. 2026-10-30 EPSS moved to the 50th–90th percentile

References

Advisory 6

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences