MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysql | — | Upgrade macOS to the latest version | Dec 16, 2011 | Nov 30, 2009 |
| Centos_linux | — | Upgrade mysql-develUpgrade mysql-serverUpgrade mysql-testUpgrade mysql-benchUpgrade mysql | Dec 1, 2016 | Nov 30, 2009 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.1.41 | Aug 29, 2012 | Nov 30, 2009 |
| Oracle_linux | — | Upgrade mysql-testUpgrade mysql-benchUpgrade mysqlUpgrade mysql-develUpgrade mysql-server | Oct 16, 2024 | Nov 30, 2009 |
| Suse | — | Upgrade mariadb104-clientUpgrade libmysqlclient18-32bitUpgrade libmysqlclient_r15-32bitUpgrade libmysql55client_r18-32bitUpgrade mysql-MaxUpgrade libmariadbd-develUpgrade libmariadb_pluginsUpgrade mariadb104-galeraUpgrade libmysqlclient_r15Upgrade mariadb-clientUpgrade mysql-toolsUpgrade libmariadb3Upgrade libmysql55client18Upgrade mysqlUpgrade mariadb-benchUpgrade libmysql55client_r18-x86Upgrade libmysqlclient_r18Upgrade libmysqlclient15Upgrade libmysqlclient18Upgrade libmysqlclient15-32bitUpgrade libmysqld19Upgrade libmariadbd104-develUpgrade libmysql55client18-32bitUpgrade libmysqld18Upgrade libmysqld-develUpgrade libmysql55client_r18Upgrade mariadb104-testUpgrade mariadb104-toolsUpgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade mariadb-100-errormessagesUpgrade mariadb104Upgrade mariadbUpgrade libmariadbd19Upgrade libmariadb-develUpgrade libmysql55client18-x86Upgrade libmysqlclient-develUpgrade libmysqlclient_r18-32bitUpgrade liblz4-1Upgrade mysql-clientUpgrade libmysqlclient_r15-x86Upgrade mariadb104-rpm-macrosUpgrade mariadb104-errormessagesUpgrade libmysqlclient15-x86Upgrade mariadb104-benchUpgrade python3-mysqlclient | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0Upgrade mysql-server-5.1 | Nov 8, 2024 | Nov 30, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub