CVEvulnerability

CVE-2008-7247

6.0 MEDIUM Published 2009-11-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-11-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
Weaknesses
CWE-59

Description

sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.

Affected configurations

• mysql mysql 5.0.0 • mysql mysql 5.0.1 • mysql mysql 5.0.2 • mysql mysql 5.0.3 • mysql mysql 5.0.4 • mysql mysql 5.0.5 • mysql mysql 5.0.5.0.21 • mysql mysql 5.0.10 • mysql mysql 5.0.15 • mysql mysql 5.0.16 • mysql mysql 5.0.17 • mysql mysql 5.0.20 • mysql mysql 5.0.22.1.0.1 • mysql mysql 5.0.24 • mysql mysql 5.0.30 • mysql mysql 5.0.36 • mysql mysql 5.0.44 • mysql mysql 5.0.54 • mysql mysql 5.0.56 • mysql mysql 5.0.60 • mysql mysql 5.0.66 • mysql mysql 5.0.82 • mysql mysql 5.1.5 • mysql mysql 5.1.23 • mysql mysql 5.1.32 • mysql mysql 6.0.9 • oracle mysql 5.0.0 • oracle mysql 5.0.3 • oracle mysql 5.0.6 • oracle mysql 5.0.7 • oracle mysql 5.0.8 • oracle mysql 5.0.11 • oracle mysql 5.0.12 • oracle mysql 5.0.13 • oracle mysql 5.0.14 • oracle mysql 5.0.18 • oracle mysql 5.0.19 • oracle mysql 5.0.21 • oracle mysql 5.0.22 • oracle mysql 5.0.23 • oracle mysql 5.0.25 • oracle mysql 5.0.26 • oracle mysql 5.0.27 • oracle mysql 5.0.30 • oracle mysql 5.0.32 • oracle mysql 5.0.33 • oracle mysql 5.0.37 • oracle mysql 5.0.38 • oracle mysql 5.0.41 • oracle mysql 5.0.42 • oracle mysql 5.0.45 • oracle mysql 5.0.50 • oracle mysql 5.0.51 • oracle mysql 5.0.52 • oracle mysql 5.0.75 • oracle mysql 5.0.77 • oracle mysql 5.0.81 • oracle mysql 5.0.83 • oracle mysql 5.1 • oracle mysql 5.1.1 … and 26 more

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References