Every CVE Search/ Get API key

CVE-2003-0150

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root...

9.0 HighPublic exploit

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Exploit likelihood

44.8%Up 34.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.0

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Record
CVE-2003-0150
CVSS 2.0
9.0 HighAV:N/AC:L/Au:S/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Record
CVE-2003-0150
Updated
2026-11-02
EUVDEUVD-2003-0146 No score

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Record
EUVD-2003-0146
Updated
2026-11-03
GitHub AdvisoriesGHSA-vw24-98xw-c2qv No score

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root...

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Record
GHSA-vw24-98xw-c2qv
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMySQL 3.23.x - 'mysqld' Local Privilege Escalation2003-03-08

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-0150 is a high vulnerability (CVSS 9.0) in Oracle Mysql, published March 21, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 44.8%, the 98th percentile. No source names a fixed version.

References

Show 10 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open