CVE-2008-4097
4.6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
33.1%
MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.
Affected configurations
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25
lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
secunia.com/advisories/32759
secunia.com/advisories/32769
www.mandriva.com/security/advisories?name=MDVSA-2009:094
www.openwall.com/lists/oss-security/2008/09/09/20
www.openwall.com/lists/oss-security/2008/09/16/3
www.ubuntu.com/usn/USN-671-1
exchange.xforce.ibmcloud.com/vulnerabilities/45648
Related
4.6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
33.1%