CVE-2005-0711: MySQL

Low severity, CVSS 2.1. EPSS: 1.7% chance of exploitation in the next 30 days.

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.

Affected products

• MySQL MySQL: version 4.1.0 only; version 4.1.3 only; version 4.1.10 only
• Oracle MySQL: version 3.23.49 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; …

Published 2005-05-02. Last modified 2026-06-16.