CVE-2001-0407

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.htmlExploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/2522
https://exchange.xforce.ibmcloud.com/vulnerabilities/6617
http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.htmlExploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/2522
https://exchange.xforce.ibmcloud.com/vulnerabilities/6617

Timeline

Published: Jun 27, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-04085.1vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when anoth CVE-2001-04092.1vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the vi CVE-2001-04107.5Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary c CVE-2001-04115.0Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant CVE-2001-04127.2Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode CVE-2001-04135.0BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which cau CVE-2001-041410.0Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possib CVE-2001-04154.6REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain acce CVE-2001-04162.1sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that ar CVE-2001-04172.1Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.CVE-2001-04185.0content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting S CVE-2001-04197.5Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.