CVEvulnerability
CVE-2008-4097
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-09-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:N/AC:H/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.
Affected configurations
• oracle mysql 5.0.51a
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html Third Party Advisory
- http://secunia.com/advisories/32759 Vendor Advisory
- http://secunia.com/advisories/32769 Broken Link, Not Applicable
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 Broken Link
- http://www.openwall.com/lists/oss-security/2008/09/09/20 Mailing List
- http://www.openwall.com/lists/oss-security/2008/09/16/3 Mailing List
- http://www.ubuntu.com/usn/USN-671-1 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45648 VDB Entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html Third Party Advisory
- http://secunia.com/advisories/32759 Vendor Advisory
- http://secunia.com/advisories/32769 Broken Link, Not Applicable
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 Broken Link
- http://www.openwall.com/lists/oss-security/2008/09/09/20 Mailing List
- http://www.openwall.com/lists/oss-security/2008/09/16/3 Mailing List
- http://www.ubuntu.com/usn/USN-671-1 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45648 VDB Entry