CVE-2008-4097

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX…

published September 17, 2008

CVSS
—
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01851 · 78.8th percentile
Published
2008-09-17T18:06Z
EPSS history
Timeline
  • 17 SEP 18:06Z
    MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX…
    cvelistv5