The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysql | — | Upgrade macOS to the latest version | Dec 16, 2011 | Nov 30, 2009 |
| Centos_linux | — | Upgrade mysql-benchUpgrade mysqlUpgrade mysql-testUpgrade mysql-develUpgrade mysql-server | Dec 1, 2016 | Nov 30, 2009 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.1.41 | Aug 29, 2012 | Nov 30, 2009 |
| Oracle_linux | — | Upgrade mysql-develUpgrade mysql-serverUpgrade mysqlUpgrade mysql-testUpgrade mysql-bench | Oct 16, 2024 | Nov 30, 2009 |
| Suse | — | Upgrade libmysqlclient15-32bitUpgrade libmysql55client_r18-32bitUpgrade libmysql55client_r18-x86Upgrade libmysql55client18-32bitUpgrade libmariadb_pluginsUpgrade mariadb-clientUpgrade libmariadbd104-develUpgrade libmysql55client_r18Upgrade libmysqld19Upgrade mariadb104-clientUpgrade libmariadbd-develUpgrade mariadb104-testUpgrade libmysqlclient_r15Upgrade libmysqlclient_r18Upgrade mariadb-benchUpgrade libmysqld18Upgrade libmysql55client18Upgrade libmysqlclient18Upgrade libmysqlclient15Upgrade mysqlUpgrade libmariadb3Upgrade mysql-toolsUpgrade mysql-MaxUpgrade libmysqld-develUpgrade mariadb104-galeraUpgrade libmysqlclient18-32bitUpgrade libmysqlclient_r15-32bitUpgrade mariadb104-rpm-macrosUpgrade libmariadbd19Upgrade mariadb-errormessagesUpgrade libmysqlclient-develUpgrade libmysqlclient_r18-32bitUpgrade libmysqlclient15-x86Upgrade libmariadb-develUpgrade mariadb-100-errormessagesUpgrade mariadb104-errormessagesUpgrade mariadb104-benchUpgrade mariadb104Upgrade libmysqlclient_r15-x86Upgrade liblz4-1Upgrade mariadbUpgrade mariadb104-toolsUpgrade mariadb-toolsUpgrade mysql-clientUpgrade libmysql55client18-x86Upgrade python3-mysqlclient | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0Upgrade mysql-server-5.1 | Nov 8, 2024 | Nov 30, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub