Ubuntu.comUB:CVE-2008-2079CVE-2008-2079
4.6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
14.3%
MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and
6.0.x before 6.0.5 allows local users to bypass certain privilege checks by
calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or
(2) INDEX DIRECTORY arguments that are within the MySQL home data
directory, which can point to tables that are created in the future.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | mysql-dfsg-5.0 | <Β 5.0.22-0ubuntu6.06.11 | UNKNOWN |
| ubuntu | 7.10 | noarch | mysql-dfsg-5.0 | <Β 5.0.45-1ubuntu3.4 | UNKNOWN |
| ubuntu | 8.04 | noarch | mysql-dfsg-5.0 | <Β 5.0.51a-3ubuntu5.4 | UNKNOWN |
Related
4.6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
14.3%