CVE-2005-0711: MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary table...

Security readout for executives and security teams

This is an old MySQL local privilege-risk issue. A user who already has local access and CREATE TEMPORARY TABLE permission could exploit predictable temporary table filenames to overwrite files through symlinks. It is not described as remotely exploitable in the bundle, but on shared systems it could affect host integrity. Exposure is most likely on legacy hosts still running affected MySQL versions, especially shared Unix-like systems where untrusted local users or database users have CREATE TEMPORARY TABLE privileges. Treat this as a legacy exposure cleanup item with higher priority on shared hosting, old appliances, or business-critical systems. It is not supported here as actively exploited, but arbitrary file overwrite can become serious when an attacker already has foothold-level access. Mitigation focus: Inventory MySQL versions and identify 4.0.23 or earlier and 4.1.x through 4.1.10.; Apply patched MySQL packages using the relevant vendor advisory for the operating system.; Remove CREATE TEMPORARY TABLE privileges from untrusted or unnecessary accounts..

Prepared

Jun 29, 2026, 23:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.