mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool. NOTE: this does not affect the Oracle MySQL product, which implements mysql_install_db differently.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-02-04T16:57:00
Updated: 2024-08-04T09:25:48.582Z
Reserved: 2020-01-17T00:00:00
Link: CVE-2020-7221
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-02-04T17:15:13.233
Modified: 2021-07-21T11:39:23.747
Link: CVE-2020-7221
Redhat