CVE-2005-0004: Debian Linux

Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days.

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

Affected products

• Debian Debian Linux: version 3.0 only
• MariaDB MariaDB: from 5.5.0, before 5.5.66 (fixed in 5.5.66)
• Oracle MySQL: from 4.0.0, before 4.0.23 (fixed in 4.0.23); from 4.1.0, before 4.1.10 (fixed in 4.1.10); from 5.0.0, before 5.0.3 (fixed in 5.0.3)

Published 2005-04-14. Last modified 2026-06-16.