MySQL Community Server < 5.1.23 / 6.0.4 Multiple Vulnerabilities

Binary data 4313.prm...

MySQL Server重命名表系统表覆盖漏洞

MySQL Server是一款开放源代码的数据库。br / MySQL Server不正确处理符号链接，本地攻击者可以利用漏洞覆盖MySQL系统表导致拒绝服务攻击。br / 使用明确的DATA DIRECTORY和INDEX DIRECTORY选项使用RENAME TABLE对表进行操作。可导致通过符号链接使用替代文件来覆盖系统表信息。可造成数据库崩溃。br / MySQL AB MySQL 5.0.50 MySQL AB MySQL 5.0.49 MySQL AB MySQL 5.0.48 MySQL AB MySQL 5.0.47 MySQL AB MySQL 5.0.46 MySQ...

CVE-2007-5969

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system...

MySQL Community Server 5.0 < 5.0.51 RENAME TABLE Symlink System Table Overwrite

The version of MySQL Community Server installed on the remote host reportedly fails to check whether a file to which a symlink points exists when using RENAME TABLE against a table with explicit DATA DIRECTORY and INDEX DIRECTORY options. A local attacker may be able to leverage this issue to...

mysql DROP privilege not enforced when renaming tables

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables...

Code injection

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables...

CVE-2007-2691

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables...