The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysql | — | Upgrade macOS to the latest version | Dec 16, 2011 | Nov 30, 2009 |
| Centos_linux | — | Upgrade mysql-serverUpgrade mysql-develUpgrade mysqlUpgrade mysql-benchUpgrade mysql-test | Dec 1, 2016 | Nov 30, 2009 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.1.41 | Aug 29, 2012 | Nov 30, 2009 |
| Oracle_linux | — | Upgrade mysql-testUpgrade mysql-benchUpgrade mysqlUpgrade mysql-develUpgrade mysql-server | Oct 16, 2024 | Nov 30, 2009 |
| Suse | — | Upgrade libmysql55client18-x86Upgrade liblz4-1Upgrade mysql-clientUpgrade libmysqlclient-develUpgrade mariadb-toolsUpgrade libmysqlclient_r18-32bitUpgrade libmariadbd19Upgrade mariadb-100-errormessagesUpgrade libmysqlclient_r15-x86Upgrade mariadb104-toolsUpgrade mariadb104Upgrade python3-mysqlclientUpgrade libmysqlclient15-x86Upgrade mariadb104-rpm-macrosUpgrade mariadb104-errormessagesUpgrade mariadbUpgrade libmariadb-develUpgrade mariadb-errormessagesUpgrade mariadb104-benchUpgrade mariadb-benchUpgrade mariadb104-galeraUpgrade libmysqlclient_r15-32bitUpgrade mysqlUpgrade libmariadbd104-develUpgrade libmysqlclient15Upgrade libmysqld18Upgrade libmariadb_pluginsUpgrade libmysql55client18Upgrade libmysqlclient18-32bitUpgrade mysql-toolsUpgrade mariadb-clientUpgrade libmysqlclient_r18Upgrade mysql-MaxUpgrade libmysqlclient_r15Upgrade libmariadbd-develUpgrade libmysqld-develUpgrade libmysql55client18-32bitUpgrade libmysqlclient15-32bitUpgrade libmysql55client_r18-x86Upgrade mariadb104-clientUpgrade mariadb104-testUpgrade libmysqlclient18Upgrade libmariadb3Upgrade libmysqld19Upgrade libmysql55client_r18Upgrade libmysql55client_r18-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0Upgrade mysql-server-5.1 | Nov 8, 2024 | Nov 30, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub