USN-671-1: MySQL vulnerabilities

It was discovered that MySQL could be made to overwrite existing table files in the data directory. An authenticated user could use the DATA DIRECTORY and INDEX DIRECTORY options to possibly bypass privilege checks. This update alters table creation behaviour by disallowing the use of the MySQL...

Debian DSA-1662-1 : mysql-dfsg-5.0 - authorization bypass

A symlink traversal vulnerability was discovered in MySQL, a relational database server. The weakness could permit an attacker having both CREATE TABLE access to a database and the ability to execute shell commands on the database server to bypass MySQL access controls, enabling them to write to...

Privilege escalation

MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time a...

CVE-2008-4097

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed wh...

CVE-2008-4097

CVE-2008-4097 : In MySQL, local users could bypass privilege checks by issuing CREATE TABLE on a MyISAM table with modified DATA DIRECTORY or INDEX DIRECTORY arguments pointing at symlinked subdirectories of the MySQL data home; this stems from an incomplete fix and affects MySQL 5.0.x/5.1.x fami...

CVE-2007-4097

Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications...

CVE-2007-4097

CVE-2007-4097 affects Tor before 0.1.2.15. The issue arises when Tor sends a "destroy cells" message that includes the reason for tearing down a circuit, which can allow remote attackers to obtain sensitive information, in violation of the protocol. This leads to partial confidentiality impact as...

CVE-2006-4097

CVE-2006-4097 concerns the CSRadius service in Cisco Secure ACS for Windows and Cisco Secure ACS Solution Engine prior to 4.1. Multiple vulnerabilities in handling RADIUS Access-Request packets can cause the CSRadius process to crash, leading to a remote DoS. The Cisco CERT advisory confirms thes...