CVE-2008-4097
6.2 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
32.5%
MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.
| CPE | Name | Operator | Version |
|---|---|---|---|
| oracle:mysql | oracle mysql | eq | 5.0.51a |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25
lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
secunia.com/advisories/32759
secunia.com/advisories/32769
www.mandriva.com/security/advisories?name=MDVSA-2009:094
www.openwall.com/lists/oss-security/2008/09/09/20
www.openwall.com/lists/oss-security/2008/09/16/3
www.ubuntu.com/usn/USN-671-1
exchange.xforce.ibmcloud.com/vulnerabilities/45648
Related
6.2 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
32.5%