CVEvulnerability

CVE-2007-5969

7.1 HIGH Published 2007-12-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-12-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:H/Au:S/C:C/I:C/A:C
Weaknesses
CWE-264

Description

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

Affected configurations

• mysql mysql server 5.1.22 • mysql mysql server 6.0 • mysql mysql server 6.0.1 • mysql mysql server 6.0.2 • mysql mysql server 6.0.3 • mysql community server (<= 5.0.50) • mysql community server 5.0.41 • mysql community server 5.0.44 • mysql community server 5.0.45 • mysql mysql enterprise server 5.0.50

Related

Weakness · not in database (1)

References