CVE-2007-5969
Fixed in a distro release EPSS 14%
MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.
Products: mysql_server, mysql community_server, mysql_enterprise_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | mysql-dfsg-5.0 | 5.0.32-7etch4 |
| Red Hat Enterprise Linux 4 | mysql | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat Enterprise Linux 4 | mysql-bench | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat Enterprise Linux 4 | mysql-debuginfo | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat Enterprise Linux 4 | mysql-devel | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat Enterprise Linux 4 | mysql-server | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat Enterprise Linux 5 | mysql | 0:5.0.22-2.2.el5_1.1 |
| Red Hat Enterprise Linux 5 | mysql-bench | 0:5.0.22-2.2.el5_1.1 |
| Red Hat Enterprise Linux 5 | mysql-debuginfo | 0:5.0.22-2.2.el5_1.1 |
| Red Hat Enterprise Linux 5 | mysql-devel | 0:5.0.22-2.2.el5_1.1 |
| Red Hat Enterprise Linux 5 | mysql-server | 0:5.0.22-2.2.el5_1.1 |
| Red Hat Enterprise Linux 5 | mysql-test | 0:5.0.22-2.2.el5_1.1 |
| Red Hat rhel application stack 1 | mysql | 0:5.0.44-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-bench | 0:5.0.44-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-cluster | 0:5.0.44-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-debuginfo | 0:5.0.44-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-devel | 0:5.0.44-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-libs | 0:5.0.44-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-server | 0:5.0.44-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-test | 0:5.0.44-2.el4s1.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| openSUSE Tumbleweed | mariadb | 10.6.4-2.1 |