MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysql | — | Apply OS X security update 2009-005 | Dec 16, 2011 | May 5, 2008 |
| Apple Osx Mysqlserver | — | Apply OS X security update 2008-007 | Dec 16, 2011 | May 5, 2008 |
| Centos_linux | — | Upgrade mysql-testUpgrade mysql-benchUpgrade mysql-serverUpgrade mysql-develUpgrade mysql | Dec 1, 2016 | May 5, 2008 |
| Freebsd | — | Upgrade mysql-server | Dec 10, 2025 | Dec 30, 2008 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | May 5, 2008 |
| Oracle_linux | — | Upgrade mysql-benchUpgrade mysql-develUpgrade mysql-testUpgrade mysql-serverUpgrade mysql | Oct 16, 2024 | May 5, 2008 |
| Suse | — | Upgrade libmysql55client18-x86Upgrade python3-mysqlclientUpgrade mariadb104-rpm-macrosUpgrade mariadb-errormessagesUpgrade libmariadb_pluginsUpgrade mariadbUpgrade libmysqlclient_r15Upgrade libmysql55client18-32bitUpgrade liblz4-1Upgrade mariadb-toolsUpgrade mariadb104-galeraUpgrade libmysqlclient-develUpgrade mariadb104-errormessagesUpgrade mariadb-clientUpgrade mariadb104Upgrade mariadb104-clientUpgrade mysql-MaxUpgrade libmariadb3Upgrade libmysqlclient_r15-32bitUpgrade libmysql55client_r18-32bitUpgrade libmysql55client_r18-x86Upgrade libmariadb-develUpgrade mysqlUpgrade mariadb-benchUpgrade mysql-clientUpgrade mariadb104-benchUpgrade libmariadbd19Upgrade libmysqlclient15-x86Upgrade libmysql55client_r18Upgrade mariadb104-toolsUpgrade libmysqlclient_r15-x86Upgrade libmysqlclient15Upgrade mariadb104-testUpgrade libmariadbd-develUpgrade libmysqlclient15-32bitUpgrade libmysql55client18Upgrade mysql-toolsUpgrade libmariadbd104-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | May 5, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub