Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-671-1
HistoryNov 17, 2008 - 12:00 a.m.

MySQL vulnerabilities

2008-11-1700:00:00
ubuntu.com
40

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.056 Low

EPSS

Percentile

93.2%

JSON

Releases

  • Ubuntu 8.04
  • Ubuntu 7.10
  • Ubuntu 6.06

Packages

  • mysql-dfsg-5.0 -

Details

It was discovered that MySQL could be made to overwrite existing table
files in the data directory. An authenticated user could use the
DATA DIRECTORY and INDEX DIRECTORY options to possibly bypass privilege
checks. This update alters table creation behaviour by disallowing the
use of the MySQL data directory in DATA DIRECTORY and INDEX DIRECTORY
options. (CVE-2008-2079, CVE-2008-4097 and CVE-2008-4098)

It was discovered that MySQL did not handle empty bit-string literals
properly. An attacker could exploit this problem and cause the MySQL
server to crash, leading to a denial of service. (CVE-2008-3963)

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchmysql-server-5.0< 5.0.51a-3ubuntu5.4UNKNOWN
Ubuntu8.04noarchlibmysqlclient15-dev< 5.0.51a-3ubuntu5.4UNKNOWN
Ubuntu8.04noarchlibmysqlclient15off< 5.0.51a-3ubuntu5.4UNKNOWN
Ubuntu8.04noarchmysql-client-5.0< 5.0.51a-3ubuntu5.4UNKNOWN
Ubuntu7.10noarchmysql-server-5.0< 5.0.45-1ubuntu3.4UNKNOWN
Ubuntu7.10noarchlibmysqlclient15-dev< 5.0.45-1ubuntu3.4UNKNOWN
Ubuntu7.10noarchlibmysqlclient15off< 5.0.45-1ubuntu3.4UNKNOWN
Ubuntu7.10noarchmysql-client-5.0< 5.0.45-1ubuntu3.4UNKNOWN
Ubuntu6.06noarchmysql-server-5.0< 5.0.22-0ubuntu6.06.11UNKNOWN
Ubuntu6.06noarchlibmysqlclient15-dev< 5.0.22-0ubuntu6.06.11UNKNOWN
Rows per page:
1-10 of 131

Related

nessus 51
openvas 76
freebsd 3
securityvulns 5
osv 3
ubuntucve 6
prion 6
cve 6
debian 5
centos 2
oraclelinux 3
redhat 6
seebug 3
veracode 3
gentoo 2
ubuntu 2
suse 1
nessus
nessus
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS : mysql-dfsg-5.0 vulnerabilities (USN-671-1)
2009-04-23 00:00:00
Mandriva Linux Security Advisory : mysql (MDVSA-2009:094)
2009-04-23 00:00:00
FreeBSD : mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths (738f8f9e-d661-11dd-a765-0030843d3802)
2008-12-30 00:00:00
openvas
openvas
Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-671-1
2009-03-23 00:00:00
Ubuntu: Security Advisory (USN-671-1)
2009-03-23 00:00:00
Mandrake Security Advisory MDVSA-2009:094 (mysql)
2009-04-28 00:00:00
freebsd
freebsd
mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths
2008-07-03 00:00:00
mysql -- MyISAM table privileges security bypass vulnerability
2008-05-05 00:00:00
mysql -- empty bit-string literal denial of service
2008-09-11 00:00:00
securityvulns
securityvulns
MySQL privilege escalation
2008-11-10 00:00:00
[SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-11-10 00:00:00
reporting CVE
2009-03-17 00:00:00
osv
osv
mysql-dfsg-5.0 - authorization bypass
2008-07-13 00:00:00
mysql-dfsg-5.0 - authorization bypass
2008-11-06 00:00:00
mysql-dfsg-5.0 - several vulnerabilities
2009-04-29 00:00:00
ubuntucve
ubuntucve
CVE-2008-4097
2008-09-18 00:00:00
CVE-2008-4098
2008-09-18 00:00:00
CVE-2009-4030
2009-11-30 00:00:00
prion
prion
Privilege escalation
2008-09-18 15:04:00
Privilege escalation
2008-09-18 15:04:00
Privilege escalation
2009-11-30 17:30:00
cve
cve
CVE-2008-4097
2008-09-18 15:04:00
CVE-2008-4098
2008-09-18 15:04:00
CVE-2009-4030
2009-11-30 17:30:00
debian
debian
[SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-11-06 04:20:00
[SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-11-06 04:20:00
[SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-07-13 04:55:16
centos
centos
mysql security update
2009-09-15 18:28:45
mysql security update
2010-02-17 16:42:25
oraclelinux
oraclelinux
mysql security and bug fix update
2009-09-08 00:00:00
mysql security update
2010-02-16 00:00:00
mysql security, bug fix, and enhancement update
2008-08-01 00:00:00
redhat
redhat
(RHSA-2009:1289) Moderate: mysql security and bug fix update
2009-09-02 09:47:12
(RHSA-2009:1067) Moderate: Red Hat Application Stack v2.3 security and enhancement update
2009-05-26 00:00:00
(RHSA-2008:0510) Moderate: Red Hat Application Stack v1.3 security and enhancement update
2008-07-02 00:00:00
seebug
seebug
MySQL MyISAM表绕过权限检查漏洞
2008-05-12 00:00:00
MySQL空两进制字符串远程拒绝服务漏洞
2008-09-14 00:00:00
MySQL vulnerabilities
2010-02-13 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:22:36
Denial Of Service (DoS)
2020-04-10 00:32:24
Authorization Bypass
2020-04-10 00:32:25
gentoo
gentoo
MySQL: Privilege bypass
2008-09-04 00:00:00
MySQL: Multiple vulnerabilities
2012-01-05 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2010-02-10 00:00:00
MySQL vulnerabilities
2012-03-12 00:00:00
suse
suse
remote code execution in openwsman
2008-08-14 18:02:43

6.5 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.056 Low

EPSS

Percentile

93.2%

JSON
Related for USN-671-1
nessus51openvas76freebsd3securityvulns5osv3ubuntucve6prion6cve6debian5centos2oraclelinux3redhat6seebug3veracode3gentoo2ubuntu2suse1