MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the SELECT * INFO OUTFILE operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mysql | Oracle | 3.23.52 (including) | 3.23.52 (including) |
| Mysql | Oracle | 3.23.53 (including) | 3.23.53 (including) |
| Mysql | Oracle | 3.23.53a (including) | 3.23.53a (including) |
| Mysql | Oracle | 3.23.54 (including) | 3.23.54 (including) |
| Mysql | Oracle | 3.23.54a (including) | 3.23.54a (including) |
| Mysql | Oracle | 3.23.55 (including) | 3.23.55 (including) |