Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2003-0150 — Oracle Mysql vulnerability
5 documents5 sources
Severity
9.0CRITICALNVD
EPSS
12.8%
top 5.96%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedMar 24
Latest updateApr 29
Description
MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.
CVSS vector
AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0