Servers and applications

CVE-2004-0381

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.

Severity: Low 2.1
Published: 4 May 2004
Last changed: 16 Jun 2026
Added to UpHeron: 21 Oct 2026
Exploit chance: 0.6% in the next 30 daysHigher than 50% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack: Needs local access · No login needed
Attacker can: Change some data
CVSS vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Sources: NVD

Affected software

Software Affected versions

Software	Affected versions
MySQLServers and applications · `cpe:a:oracle:mysql`	Version 4.1.0-alpha Version 4.0.18 Version 4.0.15 Version 4.0.14 All 74 release lines Version 3.20.32a Version 3.22.26 Version 3.22.27 Version 3.22.28 Version 3.22.29 Version 3.22.30 Version 3.22.32 Version 3.23.2 Version 3.23.3 Version 3.23.5 Version 3.23.8 Version 3.23.9 Version 3.23.10 Version 3.23.22 Version 3.23.23 Version 3.23.24 Version 3.23.25 Version 3.23.26 Version 3.23.27 Version 3.23.28 Version 3.23.28-gamma Version 3.23.29 Version 3.23.30 Version 3.23.31 Version 3.23.32 Version 3.23.33 Version 3.23.34 Version 3.23.36 Version 3.23.37 Version 3.23.38 Version 3.23.39 Version 3.23.40 Version 3.23.41 Version 3.23.42 Version 3.23.43 Version 3.23.44 Version 3.23.45 Version 3.23.46 Version 3.23.47 Version 3.23.48 Version 3.23.49 Version 3.23.50 Version 3.23.51 Version 3.23.52 Version 3.23.53 Version 3.23.53a Version 3.23.54 Version 3.23.54a Version 3.23.55 Version 3.23.56 Version 3.23.58 Version 4.0.0 Version 4.0.1 Version 4.0.2 Version 4.0.3 Version 4.0.4 Version 4.0.5 Version 4.0.5a Version 4.0.6 Version 4.0.7 Version 4.0.7-gamma Version 4.0.8 Version 4.0.8-gamma Version 4.0.9 Version 4.0.9-gamma Version 4.0.10 Version 4.0.11 Version 4.0.11-gamma Version 4.0.12 Version 4.0.13 Version 4.0.14 Version 4.0.15 Version 4.0.18 Version 4.1.0-alpha

MySQLServers and applications · cpe:a:oracle:mysql

All 74 release lines