peter bassill · operator
$ cve CVE-2003-0150 JSON

CVE-2003-0150 EXPLOIT

9.0
HIGH · CVSS 2.0 · EPSS 44.8% (pctl 99)

Patch early

A public exploit exists.

Description

MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

Scoring

CVSS9.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS44.83% — more likely to be exploited than 99% of all CVEs
On CISA KEVno
Public exploityes
Published2003-03-24
Last modified2026-06-16

Affected (1)

VendorProduct
oraclemysql

Public exploits

SourceTitleDate
exploit-dbMySQL 3.23.x - 'mysqld' Local Privilege Escalation2003-03-08

References

→ the Explorer  ·  watch your stack  ·  NVD