MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 | vendor-advisory x_refsource_MANDRIVA |
| http://www.ubuntu.com/usn/USN-671-1 | vendor-advisory x_refsource_UBUNTU |
| http://secunia.com/advisories/32769 | third-party-advisory x_refsource_SECUNIA |
| http://www.openwall.com/lists/oss-security/2008/09/09/20 | mailing-list x_refsource_MLIST |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45648 | vdb-entry x_refsource_XF |
| http://www.openwall.com/lists/oss-security/2008/09/16/3 | mailing-list x_refsource_MLIST |
| http://secunia.com/advisories/32759 | third-party-advisory x_refsource_SECUNIA |
| http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html | vendor-advisory x_refsource_SUSE |
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25 | x_refsource_CONFIRM |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 | vendor-advisory x_refsource_MANDRIVA x_transferred |
| http://www.ubuntu.com/usn/USN-671-1 | vendor-advisory x_refsource_UBUNTU x_transferred |
| http://secunia.com/advisories/32769 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.openwall.com/lists/oss-security/2008/09/09/20 | mailing-list x_refsource_MLIST x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45648 | vdb-entry x_refsource_XF x_transferred |
| http://www.openwall.com/lists/oss-security/2008/09/16/3 | mailing-list x_refsource_MLIST x_transferred |
| http://secunia.com/advisories/32759 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html | vendor-advisory x_refsource_SUSE x_transferred |
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25 | x_refsource_CONFIRM x_transferred |