[VIM] mysql_install_db permissions (CAN-2005-1636) version correction

Steven M. Christey coley at mitre.org
Thu May 19 12:41:09 EDT 2005


Issue:

  CVE:CAN-2005-1636
  FULLDISC:20050517 MySQL < 4.0.12 && MySQL <= 5.0.4 : Insecure tmp
  URL:http://marc.theaimsgroup.com/?l=full-disclosure&m=111632686805498&w=2
  MISC:http://www.zataz.net/adviso/mysql-05172005.txt

Secunia pointed out to me that the researcher made a mistake in the
initial advisory, saying that 4.x before 4.0.12 was affected, when in
fact it's 4.1.x before 4.1.12; the original advisory at

  http://www.zataz.net/adviso/mysql-05172005.txt

can be consulted to confirm that this change was made.

- Steve


More information about the VIM mailing list