MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade mariadb104-benchUpgrade libmysqld-develUpgrade python3-mysqlclientUpgrade mariadb104-errormessagesUpgrade mariadb104Upgrade libmariadbd-develUpgrade mariadb-benchUpgrade mariadb104-clientUpgrade mariadb104-testUpgrade mariadb104-toolsUpgrade mariadb104-rpm-macrosUpgrade libmariadbd19Upgrade libmysqlclient18Upgrade libmysqld19Upgrade libmariadbd104-develUpgrade mariadb-errormessagesUpgrade mariadb104-galeraUpgrade mariadb-100-errormessagesUpgrade mariadb-clientUpgrade libmariadb_pluginsUpgrade libmysqld18Upgrade libmariadb-develUpgrade libmysqlclient_r18Upgrade libmysqlclient_r18-32bitUpgrade libmysqlclient-develUpgrade libmysqlclient18-32bitUpgrade mariadb-toolsUpgrade mariadbUpgrade libmariadb3Upgrade liblz4-1 | Aug 9, 2024 | Jul 9, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub