CVE-2008-2079

MEDIUM

Description

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.

References

http://bugs.mysql.com/bug.php?id=32167

http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html

http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html

http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

http://secunia.com/advisories/30134

http://secunia.com/advisories/31066

http://secunia.com/advisories/31226

http://secunia.com/advisories/31687

http://secunia.com/advisories/32222

http://secunia.com/advisories/32769

http://secunia.com/advisories/36566

http://secunia.com/advisories/36701

http://support.apple.com/kb/HT3216

http://support.apple.com/kb/HT3865

http://www.debian.org/security/2008/dsa-1608

http://www.mandriva.com/security/advisories?name=MDVSA-2008:149

http://www.mandriva.com/security/advisories?name=MDVSA-2008:150

http://www.redhat.com/support/errata/RHSA-2008-0505.html

http://www.redhat.com/support/errata/RHSA-2008-0510.html

http://www.redhat.com/support/errata/RHSA-2008-0768.html

http://www.redhat.com/support/errata/RHSA-2009-1289.html

http://www.securityfocus.com/bid/29106

http://www.securityfocus.com/bid/31681

http://www.securitytracker.com/id?1019995

http://www.ubuntu.com/usn/USN-671-1

http://www.vupen.com/english/advisories/2008/1472/references

http://www.vupen.com/english/advisories/2008/2780

https://exchange.xforce.ibmcloud.com/vulnerabilities/42267

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133

Details

Source: MITRE

Published: 2008-05-05

Updated: 2018-10-31

Type: CWE-264

Risk Information

CVSS v2.0

Base Score: 4.6

Vector: AV:N/AC:H/Au:S/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 3.9

Severity: MEDIUM

Vulnerable Software

ID	Name	Product	Family	Severity
67998	Oracle Linux 4 : mysql (ELSA-2010-0110)	Nessus	Oracle Linux Local Security Checks	high
67997	Oracle Linux 5 : mysql (ELSA-2010-0109)	Nessus	Oracle Linux Local Security Checks	medium
63890	RHEL 5 : mysql (RHSA-2009:1289)	Nessus	Red Hat Local Security Checks	high
60736	Scientific Linux Security Update : mysql on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
60735	Scientific Linux Security Update : mysql on SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	high
60655	Scientific Linux Security Update : mysql on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	high
60451	Scientific Linux Security Update : mysql on SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
44948	CentOS 5 : mysql (CESA-2010:0109)	Nessus	CentOS Local Security Checks	medium
44647	CentOS 4 : mysql (CESA-2010:0110)	Nessus	CentOS Local Security Checks	high
44635	RHEL 4 : mysql (RHSA-2010:0110)	Nessus	Red Hat Local Security Checks	high
44634	RHEL 5 : mysql (RHSA-2010:0109)	Nessus	Red Hat Local Security Checks	medium
43782	CentOS 5 : mysql (CESA-2009:1289)	Nessus	CentOS Local Security Checks	high
42900	MySQL 5.1 < 5.1.41 Multiple Vulnerabilities	Nessus	Databases	medium
801137	MySQL < 5.1.41 Multiple Vulnerabilities	Log Correlation Engine	Database	medium
5240	Oracle MySQL < 5.1.41 Multiple Vulnerabilities	Nessus Network Monitor	Database	high
41217	SuSE9 Security Update : MySQL (YOU Patch Number 12175)	Nessus	SuSE Local Security Checks	medium
40945	Mac OS X Multiple Vulnerabilities (Security Update 2009-005)	Nessus	MacOS X Local Security Checks	critical
37407	Mandriva Linux Security Advisory : mysql (MDVSA-2008:149)	Nessus	Mandriva Local Security Checks	medium
37299	Ubuntu 6.06 LTS / 7.10 / 8.04 LTS : mysql-dfsg-5.0 vulnerabilities (USN-671-1)	Nessus	Ubuntu Local Security Checks	medium
36561	Mandriva Linux Security Advisory : mysql (MDVSA-2008:150)	Nessus	Mandriva Local Security Checks	high
35279	FreeBSD : mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths (738f8f9e-d661-11dd-a765-0030843d3802)	Nessus	FreeBSD Local Security Checks	medium
34727	MySQL Enterprise Server 5.0 < 5.0.70 Privilege Bypass	Nessus	Databases	medium
34374	Mac OS X Multiple Vulnerabilities (Security Update 2008-007)	Nessus	MacOS X Local Security Checks	critical
34159	MySQL Community Server 5.0 < 5.0.67 Multiple Vulnerabilities	Nessus	Databases	high
34151	FreeBSD : mysql -- MyISAM table privileges security bypass vulnerability (388d9ee4-7f22-11dd-a66a-0019666436c2)	Nessus	FreeBSD Local Security Checks	medium
34093	GLSA-200809-04 : MySQL: Privilege bypass	Nessus	Gentoo Local Security Checks	medium
33886	SuSE 10 Security Update : MySQL (ZYPP Patch Number 5338)	Nessus	SuSE Local Security Checks	medium
33885	openSUSE 10 Security Update : libmysqlclient-devel (libmysqlclient-devel-5341)	Nessus	SuSE Local Security Checks	medium
33585	RHEL 4 : mysql (RHSA-2008:0768)	Nessus	Red Hat Local Security Checks	medium
33492	Debian DSA-1608-1 : mysql-dfsg-5.0 - authorization bypass	Nessus	Debian Local Security Checks	medium
32138	MySQL Enterprise Server 5.0 < 5.0.60 MyISAM CREATE TABLE Privilege Check Bypass	Nessus	Databases	low
32137	MySQL 4.1 < 4.1.24 MyISAM Create Table Privilege Check Bypass	Nessus	Databases	low
4499	Oracle MySQL Enterprise Server 5.0 < 5.0.60 MyISAM Table Privilege Check Bypass	Nessus Network Monitor	Database	medium
4498	Oracle MySQL 4.1 < 4.1.24 MyISAM Table Privilege Check Bypass	Nessus Network Monitor	Database	medium
801152	MySQL 4.1 < 4.1.24 MyISAM Table Privilege Check Bypass	Log Correlation Engine	Database	low
801131	MySQL Enterprise Server 5.0 < 5.0.60 MyISAM Table Privilege Check Bypass	Log Correlation Engine	Database	low