QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-2079

Back to search

CVE-2008-2079

Published: May 5, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.

VendorProductVersions

n/a

n/a

affected
n/a

References

SUSE-SR:2008:017
vendor-advisory
x_refsource_SUSE
USN-671-1
vendor-advisory
x_refsource_UBUNTU
1019995
vdb-entry
x_refsource_SECTRACK
31681
vdb-entry
x_refsource_BID
31687
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:10133
vdb-entry
signature
x_refsource_OVAL
31226
third-party-advisory
x_refsource_SECUNIA
RHSA-2009:1289
vendor-advisory
x_refsource_REDHAT
RHSA-2008:0768
vendor-advisory
x_refsource_REDHAT
30134
third-party-advisory
x_refsource_SECUNIA
32769
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2009-09-10-2
vendor-advisory
x_refsource_APPLE
MDVSA-2008:149
vendor-advisory
x_refsource_MANDRIVA
32222
third-party-advisory
x_refsource_SECUNIA
ADV-2008-1472
vdb-entry
x_refsource_VUPEN
31066
third-party-advisory
x_refsource_SECUNIA
36701
third-party-advisory
x_refsource_SECUNIA
RHSA-2008:0505
vendor-advisory
x_refsource_REDHAT
ADV-2008-2780
vdb-entry
x_refsource_VUPEN
29106
vdb-entry
x_refsource_BID
RHSA-2008:0510
vendor-advisory
x_refsource_REDHAT
MDVSA-2008:150
vendor-advisory
x_refsource_MANDRIVA
DSA-1608
vendor-advisory
x_refsource_DEBIAN
36566
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2008-10-09
vendor-advisory
x_refsource_APPLE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now