CVE Catalog
CVE-1999-1188
MediumExploitation Probability (EPSS)
Elevated risk0.85%
53th percentile - higher than 53% of all known CVEs
Summary
mysqld in MySQL 3.21 creates log files with world-readable permissions, allowing local users to obtain passwords for users in the user database.
Risk Assessment
Local users may gain access to sensitive information, posing a risk of unauthorized access to user accounts.
Recommendation
It is recommended to change the permissions of the log files to be accessible only to authorized users.
Original NVD description (English source)
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.