Every CVESearch/Get API key

CVE-2003-0150

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root...

9.0 HighPublic exploit

CVE-2003-0150 is a high vulnerability (CVSS 9.0) in Oracle Mysql, published March 21, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 44.8%, the 98th percentile. No source names a fixed version.

What does this mean?
Severity
9.0 HighCVSS 2.0, NVD
Exploit chance
44.8%EPSS, 98th percentile
Exploitation
None known1 public exploit
Fixed in
No fix listedNo source names one

Description

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Exploit likelihood

44.8%Up 34.0 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMySQL 3.23.x - 'mysqld' Local Privilege Escalation2003-03-08

What each source reports

NVD Score used9.0

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Record
CVE-2003-0150
CVSS 2.0
9.0 HighAV:N/AC:L/Au:S/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Record
CVE-2003-0150
Updated
2026-11-02
EUVDEUVD-2003-0146No score

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Record
EUVD-2003-0146
Updated
2026-11-03
GitHub AdvisoriesGHSA-vw24-98xw-c2qvNo score

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root...

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Record
GHSA-vw24-98xw-c2qv
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 10 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open