MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
Get an AI-powered plain-language explanation of this vulnerability and remediation steps.
Login to generate AI explanation28 reference(s) from NVD