PT-1998-1169 · Oracle · Mysql Server

Publicado 1998-12-27 · Atualizado 2019-10-07 · CVE-1999-1188

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQL version 3.21

Description The issue allows local users to obtain passwords for users who are added to the user database due to world-readable log file permissions created by mysqld in MySQL.

Recommendations For MySQL version 3.21, consider changing the log file permissions to prevent world-readable access as a temporary workaround. Restrict access to the log files to minimize the risk of password exposure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1188

Produtos afetados

Mysql Server

Referências · 3

• http://marc.info/?l=bugtraq&m=91479159617803&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1188 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1568 · Nota