sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysql | — | Upgrade macOS to the latest version | Dec 16, 2011 | Nov 30, 2009 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Nov 30, 2009 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 6.0.9 | Aug 29, 2012 | Nov 30, 2009 |
| Oracle Solaris | — | Upgrade database/mysql-51 to version 5.1.37-0.175.1.10.0.5.0 on Solaris 11.1Upgrade database/mysql-51/library to version 5.1.37-0.175.1.10.0.5.0 on Solaris 11.1Upgrade database/mysql-51/tests to version 5.1.37-0.175.1.10.0.5.0 on Solaris 11.1 | May 29, 2017 | Nov 30, 2009 |
| Suse | — | Upgrade libmysql55client18Upgrade libmysqlclient_r18-32bitUpgrade libmysqlclient_r18Upgrade mariadb-toolsUpgrade libmysqlclient18-32bitUpgrade libmariadbd104-develUpgrade libmysqlclient_r15-32bitUpgrade libmysqld19Upgrade libmariadb3Upgrade libmariadb_pluginsUpgrade mariadb-benchUpgrade mariadb104-rpm-macrosUpgrade libmysqld18Upgrade mysql-clientUpgrade libmysql55client_r18-32bitUpgrade libmariadbd-develUpgrade mariadb104-clientUpgrade libmysqld-develUpgrade libmysqlclient_r15Upgrade mariadbUpgrade libmysql55client_r18-x86Upgrade mysql-MaxUpgrade libmysql55client_r18Upgrade mariadb104-benchUpgrade libmariadb-develUpgrade mariadb-errormessagesUpgrade libmysqlclient15-32bitUpgrade libmysql55client18-32bitUpgrade mariadb-clientUpgrade libmysqlclient15Upgrade libmysqlclient_r15-x86Upgrade mariadb104-galeraUpgrade mariadb104-testUpgrade libmysqlclient15-x86Upgrade python3-mysqlclientUpgrade mariadb-100-errormessagesUpgrade mariadb104Upgrade libmariadbd19Upgrade mysql-toolsUpgrade mariadb104-toolsUpgrade mysqlUpgrade libmysqlclient-develUpgrade liblz4-1Upgrade libmysqlclient18Upgrade mariadb104-errormessagesUpgrade libmysql55client18-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.1Upgrade mysql-server-5.0 | Nov 8, 2024 | Nov 30, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub