mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mysql | Oracle | 3.21 (including) | 3.21 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=91479159617803\u0026w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1568
- http://marc.info/?l=bugtraq\u0026m=91479159617803\u0026w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1568