CVE-2008-2079
Fixed in a distro release EPSS 3%
MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.
Products: mysql, oracle mysql, debian_linux, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | mysql-dfsg-5.0 | 5.0.32-7etch6 |
| Debian 5.0 | mysql-dfsg-5.0 | 5.0.51a-9+lenny2 |
| Red Hat Enterprise Linux 4 | mysql | 0:4.1.22-2.el4 |
| Red Hat Enterprise Linux 4 | mysql-bench | 0:4.1.22-2.el4 |
| Red Hat Enterprise Linux 4 | mysql-debuginfo | 0:4.1.22-2.el4 |
| Red Hat Enterprise Linux 4 | mysql-devel | 0:4.1.22-2.el4 |
| Red Hat Enterprise Linux 4 | mysql-server | 0:4.1.22-2.el4 |
| Red Hat Enterprise Linux 5 | mysql | 0:5.0.77-3.el5 |
| Red Hat Enterprise Linux 5 | mysql-bench | 0:5.0.77-3.el5 |
| Red Hat Enterprise Linux 5 | mysql-debuginfo | 0:5.0.77-3.el5 |
| Red Hat Enterprise Linux 5 | mysql-devel | 0:5.0.77-3.el5 |
| Red Hat Enterprise Linux 5 | mysql-server | 0:5.0.77-3.el5 |
| Red Hat Enterprise Linux 5 | mysql-test | 0:5.0.77-3.el5 |
| Red Hat rhel application stack 1 | httpd | 0:2.0.63-2.el4s1.2 |
| Red Hat rhel application stack 1 | httpd-debuginfo | 0:2.0.63-2.el4s1.2 |
| Red Hat rhel application stack 1 | httpd-devel | 0:2.0.63-2.el4s1.2 |
| Red Hat rhel application stack 1 | httpd-manual | 0:2.0.63-2.el4s1.2 |
| Red Hat rhel application stack 1 | mod_jk | 0:1.2.26-1.el4s1.1 |
| Red Hat rhel application stack 1 | mod_jk-ap20 | 0:1.2.26-1.el4s1.1 |
| Red Hat rhel application stack 1 | mod_jk-debuginfo | 0:1.2.26-1.el4s1.1 |
| Red Hat rhel application stack 1 | mod_jk-manual | 0:1.2.26-1.el4s1.1 |
| Red Hat rhel application stack 1 | mod_ssl | 1:2.0.63-2.el4s1.2 |
| Red Hat rhel application stack 1 | mysql | 0:5.0.50sp1a-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-bench | 0:5.0.50sp1a-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-cluster | 0:5.0.50sp1a-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-connector-odbc | 0:3.51.24r1071-1.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-connector-odbc-debuginfo | 0:3.51.24r1071-1.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-debuginfo | 0:5.0.50sp1a-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-devel | 0:5.0.50sp1a-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-libs | 0:5.0.50sp1a-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-server | 0:5.0.50sp1a-2.el4s1.1 |
| Red Hat rhel application stack 1 | mysql-test | 0:5.0.50sp1a-2.el4s1.1 |
| Red Hat rhel application stack 1 | perl-DBD-MySQL | 0:4.006-1.el4 |
| Red Hat rhel application stack 1 | perl-DBD-MySQL-debuginfo | 0:4.006-1.el4 |
| Red Hat rhel application stack 1 | perl-DBI | 0:1.604-1.el4s1 |
| Red Hat rhel application stack 1 | perl-DBI-debuginfo | 0:1.604-1.el4s1 |
| Red Hat rhel application stack 1 | php | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-bcmath | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-cli | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-common | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-dba | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-debuginfo | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-devel | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-gd | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-imap | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-ldap | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-mbstring | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-mysql | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-ncurses | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-odbc | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-pdo | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-pgsql | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-snmp | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-soap | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-xml | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | php-xmlrpc | 0:5.1.6-3.el4s1.9 |
| Red Hat rhel application stack 1 | postgresql-jdbc | 0:8.1.412-1jpp.el4s1.1 |
| Red Hat rhel application stack 1 | postgresql-jdbc-debuginfo | 0:8.1.412-1jpp.el4s1.1 |
| Red Hat rhel application stack 1 | postgresqlclient7 | 0:7.4.19-1.el4s1.1 |
| Red Hat rhel application stack 1 | postgresqlclient7-debuginfo | 0:7.4.19-1.el4s1.1 |
| Red Hat rhel application stack 1 | unixODBC | 0:2.2.12-6.el4s1.1 |
| Red Hat rhel application stack 1 | unixODBC-debuginfo | 0:2.2.12-6.el4s1.1 |
| Red Hat rhel application stack 1 | unixODBC-devel | 0:2.2.12-6.el4s1.1 |
| Red Hat rhel application stack 1 | unixODBC-kde | 0:2.2.12-6.el4s1.1 |
| Red Hat rhel application stack 2 | httpd | 0:2.2.8-1.el5s2 |
| Red Hat rhel application stack 2 | httpd-debuginfo | 0:2.2.8-1.el5s2 |
| Red Hat rhel application stack 2 | httpd-devel | 0:2.2.8-1.el5s2 |
| Red Hat rhel application stack 2 | httpd-manual | 0:2.2.8-1.el5s2 |
| Red Hat rhel application stack 2 | mod_jk | 0:1.2.26-1.el5s2 |
| Red Hat rhel application stack 2 | mod_jk-ap20 | 0:1.2.26-1.el5s2 |
| Red Hat rhel application stack 2 | mod_jk-debuginfo | 0:1.2.26-1.el5s2 |
| Red Hat rhel application stack 2 | mod_perl | 0:2.0.4-3.el5s2 |
| Red Hat rhel application stack 2 | mod_perl-debuginfo | 0:2.0.4-3.el5s2 |
| Red Hat rhel application stack 2 | mod_perl-devel | 0:2.0.4-3.el5s2 |
| Red Hat rhel application stack 2 | mod_ssl | 1:2.2.8-1.el5s2 |
| Red Hat rhel application stack 2 | mysql | 0:5.0.50sp1a-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-bench | 0:5.0.50sp1a-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-cluster | 0:5.0.50sp1a-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-connector-odbc | 0:3.51.24r1071-1.el5s2 |
| Red Hat rhel application stack 2 | mysql-connector-odbc-debuginfo | 0:3.51.24r1071-1.el5s2 |
| Red Hat rhel application stack 2 | mysql-debuginfo | 0:5.0.50sp1a-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-devel | 0:5.0.50sp1a-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-jdbc | 0:5.0.8-1jpp.1.el5s2 |
| Red Hat rhel application stack 2 | mysql-libs | 0:5.0.50sp1a-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-server | 0:5.0.50sp1a-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-test | 0:5.0.50sp1a-2.el5s2 |
| Red Hat rhel application stack 2 | perl-DBD-MySQL | 0:4.006-1.el5s2 |
| Red Hat rhel application stack 2 | perl-DBD-MySQL-debuginfo | 0:4.006-1.el5s2 |
| Red Hat rhel application stack 2 | perl-DBI | 0:1.604-1.el5s2 |
| Red Hat rhel application stack 2 | perl-DBI-debuginfo | 0:1.604-1.el5s2 |
| Red Hat rhel application stack 2 | php | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-bcmath | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-cli | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-common | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-dba | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-debuginfo | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-devel | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-gd | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-imap | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-ldap | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-mbstring | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-mysql | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-ncurses | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-odbc | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-pdo | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-pgsql | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-snmp | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-soap | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-xml | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | php-xmlrpc | 0:5.2.6-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-contrib | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-debuginfo | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-devel | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-docs | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-jdbc | 0:8.2.508-1jpp.el5s2 |
| Red Hat rhel application stack 2 | postgresql-jdbc-debuginfo | 0:8.2.508-1jpp.el5s2 |
| Red Hat rhel application stack 2 | postgresql-libs | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-odbc | 0:08.02.0500-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-odbc-debuginfo | 0:08.02.0500-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-plperl | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-plpython | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-pltcl | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-python | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-server | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-tcl | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresql-test | 0:8.2.9-1.el5s2 |
| Red Hat rhel application stack 2 | postgresqlclient81 | 0:8.1.11-1.el5s2 |
| Red Hat rhel application stack 2 | postgresqlclient81-debuginfo | 0:8.1.11-1.el5s2 |
| Red Hat rhel application stack 2 | unixODBC | 0:2.2.12-8.el5s2 |
| Red Hat rhel application stack 2 | unixODBC-debuginfo | 0:2.2.12-8.el5s2 |
| Red Hat rhel application stack 2 | unixODBC-devel | 0:2.2.12-8.el5s2 |
| Red Hat rhel application stack 2 | unixODBC-kde | 0:2.2.12-8.el5s2 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| openSUSE Tumbleweed | mariadb | 10.6.4-2.1 |