CVE-2008-2079

Published: May 5, 2008Modified: Apr 23, 2026

4.6

Vector

AV:N/AC:H/Au:S/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.

Affected (8)

Products: Mysql: Mysql · Oracle: Mysql · Debian: Debian Linux · +1 more

Show all products

Mysql: Mysql · Oracle: Mysql · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	From 4.1.0 to 4.1.24
Mysql Mysql	From 5.0.0 to 5.0.60
Mysql Mysql	From 5.1.0 to 5.1.24
Oracle Mysql	From 6.0.0 to 6.0.5

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 4.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 7.10
Canonical Ubuntu Linux	Version 8.04

Related CWEs

CWE-264

References (66)

http://bugs.mysql.com/bug.php?id=32167

Source: secalert@redhat.com

ExploitPatchVendor Advisory

http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html

Source: secalert@redhat.com

Vendor Advisory

http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html

Source: secalert@redhat.com

Vendor Advisory

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html

Source: secalert@redhat.com

Vendor Advisory

http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30134

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/31066

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/31226

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/31687

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/32222

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/32769

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/36566

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/36701

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3216

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT3865

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2008/dsa-1608

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:149

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:150

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0505.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0510.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0768.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2009-1289.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/29106

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/31681

Source: secalert@redhat.com

PatchThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1019995

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-671-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/1472/references

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2008/2780

Source: secalert@redhat.com

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/42267

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133

Source: secalert@redhat.com

Third Party Advisory

http://bugs.mysql.com/bug.php?id=32167