Lucene search

K
freebsdFreeBSD738F8F9E-D661-11DD-A765-0030843D3802
HistoryJul 03, 2008 - 12:00 a.m.

mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths

2008-07-0300:00:00
vuxml.freebsd.org
30

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

32.1%

MySQL Team reports:

Additional corrections were made for the symlink-related privilege
problem originally addressed. The original fix did not correctly
handle the data directory pathname if it contained symlinked
directories in its path, and the check was made only at
table-creation time, not at table-opening time later.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmysql-server=Β 4.1UNKNOWN
FreeBSDanynoarchmysql-server<Β 4.1.25UNKNOWN

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

32.1%