Multiple vulnerabilities have been found in MySQL, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 8.0.24 | >= 5.7.34:5.7, >= 8.0.24 |
| dev-db/mysql-connector-c | * | < 8.0.24 | >= 8.0.24 |
MySQL is a popular multi-threaded, multi-user SQL server.
Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details.
An attacker could possibly execute arbitrary code with the privileges of the process, escalate privileges, gain access to critical data or complete access to all MySQL server accessible data, or cause a Denial of Service condition.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.7.34"
All mysql users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-8.0.24"
Multiple vulnerabilities have been found in MariaDB and MySQL, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.1.38-r1, < 10.2.22 | >= 10.1.38-r1, >= 10.2.22 |
| dev-db/mysql | * | < 5.6.42, < 5.7.24 | >= 5.6.42, >= 5.7.24 |
MariaDB is an enhanced, drop-in replacement for MySQL. MySQL is a popular multi-threaded, multi-user SQL server. MySQL is a popular multi-threaded, multi-user SQL server
Multiple vulnerabilities have been discovered in MariaDB and MySQL. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All MariaDB 10.1.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.1.38-r1"
All MariaDB 10.2.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.2.22"
All MySQL 5.6.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.42"
All MySQL 5.7.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.7.24"
Multiple vulnerabilities were found in MySQL, the worst of which may allow remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.6.39 | >= 5.6.39 |
A fast, multi-threaded, multi-user SQL database server.
Multiple vulnerabilities have been discovered in MySQL. Please review the referenced CVE identifiers for details.
A remote attacker could execute arbitrary code without authentication or cause a partial denial of service condition.
There are no known workarounds at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.39"
A vulnerability was discovered in MariaDB and MySQL which may allow local users to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.0.30-r1 | >= 10.0.30-r1 |
| dev-db/mysql | * | < 5.6.36-r1 | >= 5.6.36-r1 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
The Gentoo installation scripts before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.
A local attacker could escalate privileges to root.
There is no known workaround at this time.
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.30-r1"
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.36-r1"
Multiple vulnerabilities have been found in MySQL, the worst of which could lead to privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.6.35 | >= 5.6.35 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details.
An attacker could possibly escalate privileges, gain access to critical data or complete access to all MySQL server accessible data, or cause a Denial of Service condition via unspecified vectors.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.35"
Multiple vulnerabilities have been found in MariaDB and MySQL, the worst of which could lead to the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.0.28 | >= 10.0.28 |
| dev-db/mysql | * | < 5.6.34 | >= 5.6.34 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MariaDB and MySQL. Please review the CVE identifiers referenced below for details.
Attackers could execute arbitrary code, escalate privileges, and impact availability via unspecified vectors.
There is no known workaround at this time.
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.28"
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.34"
Multiple vulnerabilities have been found in MySQL and MariaDB, the worst of which could allow remote attackers to cause a Denial of Service condition or obtain sensitive information.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariab | * | — | >= 10.0.27 |
| dev-db/mariadb | * | < 10.0.27 | > 5.5.51 (revision) |
| dev-db/mysql | * | < 5.6.31 | >= 5.6.31 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MySQL and MariaDB. Please review the CVE identifiers referenced below for details.
A remote attacker could exploit vulnerabilities, through multiple vectors, that affect the confidentiality, integrity, and availability of MySQL and MariaDB.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.31"
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.27"
Multiple vulnerabilities have been found in MySQL, allowing attackers to execute arbitrary code or cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.6.24 | >= 5.5.43 (revision), >= 5.6.24 |
MySQL is a fast, multi-threaded, multi-user SQL database server.
Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details.
A remote attacker could send a specially crafted request, possibly resulting in execution of arbitrary code with the privileges of the application or a Denial of Service condition.
There is no known workaround at this time.
All MySQL 5.5.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.5.43"
All MySQL 5.6.x users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.24"
Multiple vulnerabilities have been found in MySQL and MariaDB, the worst of which can allow remote attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 10.0.16 | >= 10.0.16, >= 5.5.49 (revision) |
| dev-db/mysql | * | < 5.6.22 | >= 5.6.22 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple vulnerabilities have been discovered in MySQL and MariaDB. Please review the CVE identifiers referenced below for details.
A remote attacker could exploit vulnerabilities to possibly cause a Denial of Service condition.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.6.22"
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-10.0.16"
Multiple vulnerabilities have been found in the MySQL and MariaDB, possibly allowing attackers to cause unspecified impact.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mariadb | * | < 5.5.40-r1 | >= 5.5.40-r1 |
| dev-db/mysql | * | < 5.5.40 | >= 5.5.40 |
MySQL is a popular multi-threaded, multi-user SQL server. MariaDB is an enhanced, drop-in replacement for MySQL.
Multiple unspecified vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details.
A remote attacker could exploit these vulnerabilities to cause unspecified impact, possibly including remote execution of arbitrary code, Denial of Service, or disclosure of sensitive information.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.5.40"
All MariaDB users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mariadb-5.5.40-r1"
Multiple vulnerabilities have been found in MySQL, worst of which allows local attackers to escalate their privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.5.39 | >= 5.5.39 |
MySQL is a popular multi-threaded, multi-user SQL server.
Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details.
A local attacker could possibly gain escalated privileges. A remote attacker could send a specially crafted SQL query, possibly resulting in a Denial of Service condition. A remote attacker could entice a user to connect to specially crafted MySQL server, possibly resulting in execution of arbitrary code with the privileges of the process.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.5.39"
Multiple vulnerabilities have been found in MySQL, allowing attackers to execute arbitrary code or cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.1.70 | >= 5.1.70 |
MySQL is a fast, multi-threaded, multi-user SQL database server.
Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details.
A remote attacker could send a specially crafted request, possibly resulting in execution of arbitrary code with the privileges of the application or a Denial of Service condition.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.1.70"
Multiple vulnerabilities were found in MySQL, some of which may allow execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.1.56 | >= 5.1.56 |
MySQL is a popular open-source multi-threaded, multi-user SQL database server.
Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details.
An unauthenticated remote attacker may be able to execute arbitrary code with the privileges of the MySQL process, cause a Denial of Service condition, bypass security restrictions, uninstall arbitrary MySQL plugins, or conduct Man-in-the-Middle and Cross-Site Scripting attacks.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.1.56"
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since May 14, 2011. It is likely that your system is already no longer affected by this issue.
A vulnerability in MySQL might allow users to bypass privileges and gain access to other databases.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.0.60-r1 | >= 5.0.60-r1 |
MySQL is a popular multi-threaded, multi-user SQL server.
Sergei Golubchik reported that MySQL imposes no restrictions on the specification of "DATA DIRECTORY" or "INDEX DIRECTORY" in SQL "CREATE TABLE" statements.
An authenticated remote attacker could create MyISAM tables, specifying DATA or INDEX directories that contain future table files by other database users, or existing table files in the MySQL data directory, gaining access to those tables.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.0.60-r1"
Multiple vulnerabilities in MySQL might lead to privilege escalation and Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.0.54 | >= 5.0.54 |
MySQL is a popular multi-threaded, multi-user SQL server.
Multiple vulnerabilities have been reported in MySQL:
An authenticated remote attacker could exploit the first vulnerability to overwrite MySQL system tables and escalate privileges, or use the second vulnerability to gain privileges via an "ALTER VIEW" statement. Remote federated MySQL servers could cause a Denial of Service in the local MySQL server by exploiting the third vulnerability.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.0.54"
A Denial of Service vulnerability was found in MySQL.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.0.44-r2 | >= 5.0.44-r2 |
MySQL is a popular multi-threaded, multi-user SQL server.
Joe Gallo and Artem Russakovskii reported an error in the convert_search_mode_to_innobase() function in ha_innodb.cc in the InnoDB engine that is leading to a failed assertion when handling CONTAINS operations.
A remote authenticated attacker with ALTER privileges could send a specially crafted request to a vulnerable database server possibly leading to a Denial of Service.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.0.44-r2"
A Denial of Service vulnerability and a table structure information leakage vulnerability were found in MySQL.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.0.44 | >= 5.0.44 |
MySQL is a popular multi-threaded, multi-user SQL server.
Dormando reported a vulnerability within the handling of password packets in the connection protocol (CVE-2007-3780). Andrei Elkin also found that the "CREATE TABLE LIKE" command didn't require SELECT privileges on the source table (CVE-2007-3781).
A remote unauthenticated attacker could use the first vulnerability to make the server crash. The second vulnerability can be used by authenticated users to obtain information on tables they are not normally able to access.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.0.44"
Two Denial of Service vulnerabilities have been discovered in MySQL.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.0.38 | >= 5.0.38, < 5.0 |
MySQL is a popular multi-threaded, multi-user SQL server.
mu-b discovered a NULL pointer dereference in item_cmpfunc.cc when processing certain types of SQL requests. Sec Consult also discovered another NULL pointer dereference when sorting certain types of queries on the database metadata.
In both cases, a remote attacker could send a specially crafted SQL request to the server, possibly resulting in a server crash. Note that the attacker needs the ability to execute SELECT queries.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-5.0.38"
An authenticated user can crash MySQL through invalid parameters to the date_format function.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 4.1.21 | >= 4.1.21, < 4.1.0 |
MySQL is a popular multi-threaded, multi-user SQL server.
Jean-David Maillefer discovered a format string vulnerability in time.cc where MySQL fails to properly handle specially formatted user input to the date_format function.
By specifying a format string as the first parameter to the date_format function, an authenticated attacker could cause MySQL to crash, resulting in a Denial of Service.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --verbose --oneshot ">=dev-db/mysql-4.1.21"
MySQL is vulnerable to an SQL Injection flaw in the multi-byte encoding process.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 5.0.22 | >= 5.0.22, >= 4.1.20 (revision), >= 4.1.21 (revision), >= 4.1.22 (revision), < 4.1 |
MySQL is a popular multi-threaded, multi-user SQL server.
MySQL is vulnerable to an injection flaw in mysql_real_escape() when used with multi-byte characters.
Due to a flaw in the multi-byte character process, an attacker is still able to inject arbitary SQL statements into the MySQL server for execution.
There are a few workarounds available: NO_BACKSLASH_ESCAPES mode as a workaround for a bug in mysql_real_escape_string(): SET sql_mode='NO_BACKSLASH_ESCAPES'; SET GLOBAL sql_mode='NO_BACKSLASH_ESCAPES'; and server command line options: --sql-mode=NO_BACKSLASH_ESCAPES.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-4.1.20"
A MySQL server may leak information to unauthorized users.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 4.1.19 | >= 4.1.19, >= 4.0.27 (revision) |
MySQL is a popular multi-threaded, multi-user SQL database server.
The processing of the COM_TABLE_DUMP command by a MySQL server fails to properly validate packets that arrive from the client via a network socket.
By crafting specific malicious packets an attacker could gather confidential information from the memory of a MySQL server process, for example results of queries by other users or applications. By using PHP code injection or similar techniques it would be possible to exploit this flaw through web applications that use MySQL as a database backend.
Note that on 5.x versions it is possible to overwrite the stack and execute arbitrary code with this technique. Users of MySQL 5.x are urged to upgrade to the latest available version.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version.
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-4.0.27"
MySQL contains several vulnerabilities potentially leading to the overwriting of local files or to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 4.0.24 | >= 4.0.24 |
MySQL is a fast, multi-threaded, multi-user SQL database server.
MySQL fails to properly validate input for authenticated users with INSERT and DELETE privileges (CAN-2005-0709 and CAN-2005-0710). Furthermore MySQL uses predictable filenames when creating temporary files with CREATE TEMPORARY TABLE (CAN-2005-0711).
An attacker with INSERT and DELETE privileges could exploit this to manipulate the mysql table or accessing libc calls, potentially leading to the execution of arbitrary code with the permissions of the user running MySQL. An attacker with CREATE TEMPORARY TABLE privileges could exploit this to overwrite arbitrary files via a symlink attack.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-4.0.24"
MySQL is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 4.0.22-r2 | >= 4.0.22-r2 |
MySQL is a fast, multi-threaded, multi-user SQL database server.
Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the 'mysqlaccess' script creates temporary files in world-writeable directories with predictable names.
A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere on the filesystem. When the mysqlaccess script is executed, this would result in the file being overwritten with the rights of the user running the software, which could be the root user.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-db/mysql-4.0.22-r2"
Several vulnerabilities including privilege abuse, Denial of Service, and potentially remote arbitrary code execution have been discovered in MySQL.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 4.0.21 | >= 4.0.21 |
MySQL is a popular open-source, multi-threaded, multi-user SQL database server.
The following vulnerabilities were found and fixed in MySQL:
Oleksandr Byelkin found that ALTER TABLE ... RENAME checks CREATE/INSERT rights of the old table instead of the new one (CAN-2004-0835). Another privilege checking bug allowed users to grant rights on a database they had no rights on.
Dean Ellis found a defect where multiple threads ALTERing the MERGE tables to change the UNION could cause the server to crash (CAN-2004-0837). Another crash was found in MATCH ... AGAINST() queries with missing closing double quote.
Finally, a buffer overrun in the mysql_real_connect function was found by Lukasz Wojtow (CAN-2004-0836).
The privilege checking issues could be used by remote users to bypass their rights on databases. The two crashes issues could be exploited by a remote user to perform a Denial of Service attack on MySQL server. The buffer overrun issue could also be exploited as a Denial of Service attack, and may allow to execute arbitrary code with the rights of the MySQL daemon (typically, the "mysql" user).
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge sync # emerge -pv ">=dev-db/mysql-4.0.21" # emerge ">=dev-db/mysql-4.0.21"
The mysqlhotcopy utility can create temporary files with predictable paths, allowing an attacker to use a symlink to trick MySQL into overwriting important data.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | <= 4.0.20 | >= 4.0.20-r1 |
MySQL is a popular open-source multi-threaded, multi-user SQL database server.
Jeroen van Wolffelaar discovered that the MySQL database hot copy utility (mysqlhotcopy.sh), when using the scp method, uses temporary files with predictable names. A malicious local user with write access to the /tmp directory could create a symbolic link pointing to a file, which may then be overwritten. In cases where mysqlhotcopy is run as root, a malicious user could create a symlink to a critical file such as /etc/passwd and cause it to be overwritten.
A local attacker could use this vulnerability to destroy other users' data or corrupt and destroy system files, possibly leading to a denial of service condition.
There is no known workaround at this time.
All MySQL users should upgrade to the latest version:
# emerge sync # emerge -pv ">=dev-db/mysql-4.0.20-r1" # emerge ">=dev-db/mysql-4.0.20-r1"
Two MySQL utilities create temporary files with hardcoded paths, allowing an attacker to use a symlink to trick MySQL into overwriting important data.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-db/mysql | * | < 4.0.18-r2 | >= 4.0.18-r2 |
MySQL is a popular open-source multi-threaded, multi-user SQL database server.
The MySQL bug reporting utility (mysqlbug) creates a temporary file to log bug reports to. A malicious local user with write access to the /tmp directory could create a symbolic link of the name mysqlbug-N pointing to a protected file, such as /etc/passwd, such that when mysqlbug creates the Nth log file, it would end up overwriting the target file. A similar vulnerability exists with the mysql_multi utility, which creates a temporary file called mysql_multi.log.
Since mysql_multi runs as root, a local attacker could use this to destroy any other users' data or corrupt and destroy system files.
One could modify both scripts to log to a directory that users do not have write permission to, such as /var/log/mysql/.
All users should upgrade to the latest stable version of MySQL.
# emerge sync # emerge -pv ">=dev-db/mysql-4.0.18-r2" # emerge ">=dev-db/mysql-4.0.18-r2"