MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysqlserver | — | Apply OS X security update 2008-007 | Dec 16, 2011 | Dec 10, 2007 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 18, 2013 |
| Freebsd | — | Upgrade mysql-server | Dec 10, 2025 | Jan 11, 2009 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 10, 2007 |
| Oracle_linux | — | Upgrade mysqlUpgrade mysql-develUpgrade mysql-serverUpgrade mysql-testUpgrade mysql-bench | Oct 16, 2024 | Dec 10, 2007 |
| Suse | — | Upgrade libmysqlclient15-x86Upgrade mysqlUpgrade libmysql55client_r18-x86Upgrade libmysqlclient-develUpgrade python3-mysqlclientUpgrade libmariadb_pluginsUpgrade libmysqlclient15Upgrade libmariadb-develUpgrade libmysql55client18-x86Upgrade mysql-clientUpgrade mariadb-toolsUpgrade liblz4-1Upgrade mysql-toolsUpgrade mariadb104-toolsUpgrade mariadb-clientUpgrade mariadb104-galeraUpgrade libmariadbd-develUpgrade mariadb104-rpm-macrosUpgrade mariadb104-benchUpgrade mariadbUpgrade mariadb104-testUpgrade libmariadbd104-develUpgrade libmariadb3Upgrade libmysql55client_r18Upgrade libmysqlclient15-32bitUpgrade libmysql55client18-32bitUpgrade libmysqlclient_r15-x86Upgrade mariadb104Upgrade libmysql55client_r18-32bitUpgrade libmysql55client18Upgrade mariadb104-clientUpgrade libmariadbd19Upgrade mysql-MaxUpgrade mariadb-benchUpgrade mariadb104-errormessagesUpgrade libmysqlclient_r15Upgrade libmysqlclient_r15-32bitUpgrade mariadb-errormessages | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | Dec 10, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub