Ubuntu.comUB:CVE-2008-4097CVE-2008-4097
4.6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
32.0%
MySQL 5.0.51a allows local users to bypass certain privilege checks by
calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or
(2) INDEX DIRECTORY arguments that are associated with symlinks within
pathnames for subdirectories of the MySQL home data directory, which are
followed when tables are created in the future. NOTE: this vulnerability
exists because of an incomplete fix for CVE-2008-2079.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | mysql-dfsg-5.0 | <Β 5.0.22-0ubuntu6.06.11 | UNKNOWN |
| ubuntu | 7.10 | noarch | mysql-dfsg-5.0 | <Β 5.0.45-1ubuntu3.4 | UNKNOWN |
| ubuntu | 8.04 | noarch | mysql-dfsg-5.0 | <Β 5.0.51a-3ubuntu5.4 | UNKNOWN |
Related
4.6 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
32.0%