MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.
CVSS Details
- CVSS 3.1 Base Score: 5.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysql | — | Apply OS X security update 2009-005 | Dec 16, 2011 | May 5, 2008 |
| Apple Osx Mysqlserver | — | Apply OS X security update 2008-007 | Dec 16, 2011 | May 5, 2008 |
| Centos_linux | — | Upgrade mysql-testUpgrade mysql-serverUpgrade mysql-benchUpgrade mysql-develUpgrade mysql | Dec 1, 2016 | May 5, 2008 |
| Freebsd | — | Upgrade mysql-server | Dec 10, 2025 | Dec 30, 2008 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | May 5, 2008 |
| Oracle_linux | — | Upgrade mysql-develUpgrade mysql-benchUpgrade mysql-testUpgrade mysqlUpgrade mysql-server | Oct 16, 2024 | May 5, 2008 |
| Suse | — | Upgrade libmysqlclient_r15-x86Upgrade mariadb104-testUpgrade mariadb104-toolsUpgrade mariadb-benchUpgrade libmysql55client_r18-32bitUpgrade mysql-toolsUpgrade libmysqlclient15Upgrade mysql-clientUpgrade libmysqlclient_r15-32bitUpgrade libmariadbd19Upgrade libmysql55client_r18-x86Upgrade libmariadb-develUpgrade mariadb104-benchUpgrade libmysqlclient15-x86Upgrade libmysqlclient15-32bitUpgrade libmysql55client_r18Upgrade mysql-MaxUpgrade libmariadbd104-develUpgrade mariadb104-clientUpgrade libmariadbd-develUpgrade mysqlUpgrade libmysql55client18Upgrade libmariadb3Upgrade libmysqlclient-develUpgrade libmysqlclient_r15Upgrade python3-mysqlclientUpgrade mariadb-toolsUpgrade libmysql55client18-32bitUpgrade mariadb-errormessagesUpgrade libmysql55client18-x86Upgrade mariadb104-errormessagesUpgrade mariadb-clientUpgrade liblz4-1Upgrade mariadbUpgrade libmariadb_pluginsUpgrade mariadb104-rpm-macrosUpgrade mariadb104Upgrade mariadb104-galera | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | May 5, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub