CVEvulnerability
CVE-2008-2079
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-05-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:N/AC:H/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.
Affected configurations
• mysql mysql (>= 4.1.0 < 4.1.24)
• mysql mysql (>= 5.0.0 < 5.0.60)
• mysql mysql (>= 5.1.0 < 5.1.24)
• oracle mysql (>= 6.0.0 < 6.0.5)
• debian debian linux 4.0
• canonical ubuntu linux 6.06
• canonical ubuntu linux 7.10
• canonical ubuntu linux 8.04
Related
Weakness · not in database (1)
References
- http://bugs.mysql.com/bug.php?id=32167 Exploit, Patch, Vendor Advisory
- http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html Vendor Advisory
- http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html Vendor Advisory
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html Vendor Advisory
- http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html Third Party Advisory
- http://secunia.com/advisories/30134 Third Party Advisory
- http://secunia.com/advisories/31066 Third Party Advisory
- http://secunia.com/advisories/31226 Third Party Advisory
- http://secunia.com/advisories/31687 Third Party Advisory
- http://secunia.com/advisories/32222 Third Party Advisory
- http://secunia.com/advisories/32769 Third Party Advisory
- http://secunia.com/advisories/36566 Third Party Advisory
- http://secunia.com/advisories/36701 Third Party Advisory
- http://support.apple.com/kb/HT3216 Third Party Advisory
- http://support.apple.com/kb/HT3865 Third Party Advisory
- http://www.debian.org/security/2008/dsa-1608 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:149 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0505.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0510.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0768.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-1289.html Third Party Advisory
- http://www.securityfocus.com/bid/29106 Patch, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/31681 Patch, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1019995 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-671-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2008/1472/references Third Party Advisory
- http://www.vupen.com/english/advisories/2008/2780 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42267 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133 Third Party Advisory
- http://bugs.mysql.com/bug.php?id=32167 Exploit, Patch, Vendor Advisory
- http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html Vendor Advisory
- http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html Vendor Advisory
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html Vendor Advisory
- http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html Vendor Advisory
- http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html Mailing List, Third Party Advisory
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html Third Party Advisory
- http://secunia.com/advisories/30134 Third Party Advisory
- http://secunia.com/advisories/31066 Third Party Advisory
- http://secunia.com/advisories/31226 Third Party Advisory
- http://secunia.com/advisories/31687 Third Party Advisory
- http://secunia.com/advisories/32222 Third Party Advisory
- http://secunia.com/advisories/32769 Third Party Advisory
- http://secunia.com/advisories/36566 Third Party Advisory
- http://secunia.com/advisories/36701 Third Party Advisory
- http://support.apple.com/kb/HT3216 Third Party Advisory
- http://support.apple.com/kb/HT3865 Third Party Advisory
- http://www.debian.org/security/2008/dsa-1608 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:149 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0505.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0510.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0768.html Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2009-1289.html Third Party Advisory
- http://www.securityfocus.com/bid/29106 Patch, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/31681 Patch, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1019995 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-671-1 Third Party Advisory
- http://www.vupen.com/english/advisories/2008/1472/references Third Party Advisory
- http://www.vupen.com/english/advisories/2008/2780 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42267 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133 Third Party Advisory