CVE-2016-6664 in MySQLinfo

Summary

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster before 5.5.41-37.0, 5.6.x before 5.6.32-25.17, and 5.7.x before 5.7.14-26.17, when using file-based logging, allows local users with access to the mysql account to gain root privileges via a symlink attack on error logs and possibly other files.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

08/10/2016

Disclosure

12/13/2016

Entries

1: VDB-94164

CPE

ready

Exploit

Download

CVSS

7.0

EPSS

0.54393

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!