Lucene search

CVE-2008-4098

🗓️ 18 Sep 2008 15:27:04Reported by redhatType

MySQL 5.0.67 allows local users to bypass privilege checks via CREATE TABLE

Reporter	Title	Published	Views	Family All 116
Tenable Nessus	SuSE9 Security Update : MySQL (YOU Patch Number 12256)	24 Sep 200900:00	–	nessus
Tenable Nessus	Debian DSA-1662-1 : mysql-dfsg-5.0 - authorization bypass	6 Nov 200800:00	–	nessus
Tenable Nessus	openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-5619)	21 Dec 200800:00	–	nessus
Tenable Nessus	FreeBSD : mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths (738f8f9e-d661-11dd-a765-0030843d3802)	30 Dec 200800:00	–	nessus
Tenable Nessus	SuSE 10 Security Update : MySQL (ZYPP Patch Number 5618)	13 Nov 200800:00	–	nessus
Tenable Nessus	openSUSE Security Update : libmysqlclient-devel (libmysqlclient-devel-210)	21 Jul 200900:00	–	nessus
Tenable Nessus	openSUSE 10 Security Update : mysql (mysql-5613)	1 Dec 200800:00	–	nessus
Tenable Nessus	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS : mysql-dfsg-5.0 vulnerabilities (USN-671-1)	23 Apr 200900:00	–	nessus
Tenable Nessus	MySQL Enterprise Server 5.0 < 5.0.70 Privilege Bypass	9 Nov 200800:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : mysql (MDVSA-2009:326)	8 Dec 200900:00	–	nessus

Nvd

Node

canonical ubuntu_linuxMatch6.06lts

canonical ubuntu_linuxMatch7.10

canonical ubuntu_linuxMatch8.04lts

canonical ubuntu_linuxMatch8.10

canonical ubuntu_linuxMatch9.04

canonical ubuntu_linuxMatch9.10

Node

debian debian_linuxMatch5.0

Node

mysql mysqlMatch5.0.0

mysql mysqlMatch5.0.1

mysql mysqlMatch5.0.2

mysql mysqlMatch5.0.3

mysql mysqlMatch5.0.4

mysql mysqlMatch5.0.5

mysql mysqlMatch5.0.10

mysql mysqlMatch5.0.15

mysql mysqlMatch5.0.16

mysql mysqlMatch5.0.17

mysql mysqlMatch5.0.20

mysql mysqlMatch5.0.24

mysql mysqlMatch5.0.30

mysql mysqlMatch5.0.36

mysql mysqlMatch5.0.44

mysql mysqlMatch5.0.54

mysql mysqlMatch5.0.56

mysql mysqlMatch5.0.60

mysql mysqlMatch5.0.66

oracle mysqlMatch5.0.23

oracle mysqlMatch5.0.25

oracle mysqlMatch5.0.26

oracle mysqlMatch5.0.28

oracle mysqlMatch5.0.30sp1

oracle mysqlMatch5.0.32

oracle mysqlMatch5.0.34

oracle mysqlMatch5.0.36sp1

oracle mysqlMatch5.0.38

oracle mysqlMatch5.0.40

oracle mysqlMatch5.0.41

oracle mysqlMatch5.0.42

oracle mysqlMatch5.0.44sp1

oracle mysqlMatch5.0.45

oracle mysqlMatch5.0.46

oracle mysqlMatch5.0.48

oracle mysqlMatch5.0.50

oracle mysqlMatch5.0.50sp1

oracle mysqlMatch5.0.51

oracle mysqlMatch5.0.52

oracle mysqlMatch5.0.56sp1

oracle mysqlMatch5.0.58

oracle mysqlMatch5.0.60sp1

oracle mysqlMatch5.0.62

oracle mysqlMatch5.0.64

oracle mysqlMatch5.0.66sp1

Source	Link
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10591
redhat	www.redhat.com/support/errata/RHSA-2009-1067.html
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
ubuntu	www.ubuntu.com/usn/USN-1397-1
openwall	www.openwall.com/lists/oss-security/2008/09/09/20
debian	www.debian.org/security/2008/dsa-1662
bugs	www.bugs.mysql.com/bug.php
ubuntu	www.ubuntu.com/usn/USN-671-1
openwall	www.openwall.com/lists/oss-security/2008/09/16/3
secunia	www.secunia.com/advisories/38517

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Sep 2008 15:04Current

6.3Medium risk

Vulners AI Score6.3

CVSS24.6

EPSS0.001

CWE-59