Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-2079
HistoryMay 05, 2008 - 4:20 p.m.

CVE-2008-2079

2008-05-0516:20:00
CWE-264
[email protected]
web.nvd.nist.gov
192
cve-2008-2079
mysql
privilege bypass
create table
nvd

6 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

14.5%

JSON

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.

References

Related

nessus 35
openvas 50
veracode 1
gentoo 1
seebug 1
redhat 4
ubuntucve 3
debian 1
freebsd 2
prion 3
cve 2
osv 1
securityvulns 2
redhatcve 1
centos 1
oraclelinux 2
ubuntu 1
suse 1
nessus
nessus
GLSA-200809-04 : MySQL: Privilege bypass
2008-09-05 00:00:00
MySQL 4.1 < 4.1.24 MyISAM Create Table Privilege Check Bypass
2008-05-09 00:00:00
Debian DSA-1608-1 : mysql-dfsg-5.0 - authorization bypass
2008-07-15 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200809-04 (mysql)
2008-09-24 00:00:00
FreeBSD Ports: mysql-server
2008-09-17 00:00:00
Mandriva Update for mysql MDVSA-2008:149 (mysql)
2009-04-09 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:22:36
gentoo
gentoo
MySQL: Privilege bypass
2008-09-04 00:00:00
seebug
seebug
MySQL MyISAM葨绕过权限检ζŸ₯漏洞
2008-05-12 00:00:00
redhat
redhat
(RHSA-2008:0510) Moderate: Red Hat Application Stack v1.3 security and enhancement update
2008-07-02 00:00:00
(RHSA-2008:0768) Moderate: mysql security, bug fix, and enhancement update
2008-07-24 00:00:00
(RHSA-2009:1289) Moderate: mysql security and bug fix update
2009-09-02 09:47:12
ubuntucve
ubuntucve
CVE-2008-2079
2008-05-05 00:00:00
CVE-2008-4097
2008-09-18 00:00:00
CVE-2009-4030
2009-11-30 00:00:00
debian
debian
[SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-07-13 04:55:16
freebsd
freebsd
mysql -- MyISAM table privileges security bypass vulnerability
2008-05-05 00:00:00
mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths
2008-07-03 00:00:00
prion
prion
Privilege escalation
2008-05-05 16:20:00
Privilege escalation
2008-09-18 15:04:00
Privilege escalation
2009-11-30 17:30:00
cve
cve
CVE-2008-4097
2008-09-18 15:04:00
CVE-2009-4030
2009-11-30 17:30:00
osv
osv
mysql-dfsg-5.0 - authorization bypass
2008-07-13 00:00:00
securityvulns
securityvulns
MySQL privilege escalation
2008-11-10 00:00:00
[ MDVSA-2010:012 ] mysql
2010-01-19 00:00:00
redhatcve
redhatcve
CVE-2008-4097
2015-10-30 10:30:27
centos
centos
mysql security update
2009-09-15 18:28:45
oraclelinux
oraclelinux
mysql security and bug fix update
2009-09-08 00:00:00
mysql security, bug fix, and enhancement update
2008-08-01 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2008-11-17 00:00:00
suse
suse
remote code execution in openwsman
2008-08-14 18:02:43

6 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

14.5%

JSON
Related for CVE-2008-2079
nessus35openvas50veracode1gentoo1seebug1redhat4ubuntucve3debian1freebsd2prion3cve2osv1securityvulns2redhatcve1centos1oraclelinux2ubuntu1suse1