CVE-2003-0150: Oracle MySQL

High severity, CVSS 9.0. EPSS: 44.8% chance of exploitation in the next 30 days.

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Affected products

• Oracle MySQL: version 3.23.52 only; version 3.23.53 only; version 3.23.53a only; version 3.23.54 only; version 3.23.54a only; version 3.23.55 only

Published 2003-03-24. Last modified 2026-06-16.