CVE-2008-4098
Fixed in a distro release EPSS 2%
MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097.
Products: canonical ubuntu_linux, debian_linux, mysql, oracle mysql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | mysql-dfsg-5.0 | 5.0.32-7etch8 |
| Red Hat Enterprise Linux 4 | mysql | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 4 | mysql-bench | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 4 | mysql-debuginfo | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 4 | mysql-devel | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 4 | mysql-server | 0:4.1.22-2.el4_8.3 |
| Red Hat rhel application stack 2 | httpd | 0:2.2.11-2.el5s2 |
| Red Hat rhel application stack 2 | httpd-debuginfo | 0:2.2.11-2.el5s2 |
| Red Hat rhel application stack 2 | httpd-devel | 0:2.2.11-2.el5s2 |
| Red Hat rhel application stack 2 | httpd-manual | 0:2.2.11-2.el5s2 |
| Red Hat rhel application stack 2 | mod_jk | 0:1.2.28-2.el5s2 |
| Red Hat rhel application stack 2 | mod_jk-ap20 | 0:1.2.28-2.el5s2 |
| Red Hat rhel application stack 2 | mod_jk-debuginfo | 0:1.2.28-2.el5s2 |
| Red Hat rhel application stack 2 | mod_ssl | 1:2.2.11-2.el5s2 |
| Red Hat rhel application stack 2 | mysql | 0:5.0.79-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-bench | 0:5.0.79-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-cluster | 0:5.0.79-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-connector-odbc | 0:3.51.27r695-1.el5s2 |
| Red Hat rhel application stack 2 | mysql-connector-odbc-debuginfo | 0:3.51.27r695-1.el5s2 |
| Red Hat rhel application stack 2 | mysql-debuginfo | 0:5.0.79-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-devel | 0:5.0.79-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-libs | 0:5.0.79-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-server | 0:5.0.79-2.el5s2 |
| Red Hat rhel application stack 2 | mysql-test | 0:5.0.79-2.el5s2 |
| Red Hat rhel application stack 2 | perl-DBD-MySQL | 0:4.010-1.el5s2 |
| Red Hat rhel application stack 2 | perl-DBD-MySQL-debuginfo | 0:4.010-1.el5s2 |
| Red Hat rhel application stack 2 | perl-DBD-Pg | 0:1.49-5.el5s2 |
| Red Hat rhel application stack 2 | perl-DBD-Pg-debuginfo | 0:1.49-5.el5s2 |
| Red Hat rhel application stack 2 | php | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-bcmath | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-cli | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-common | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-dba | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-debuginfo | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-devel | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-gd | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-imap | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-ldap | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-mbstring | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-mysql | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-ncurses | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-odbc | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-pdo | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-pgsql | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-snmp | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-soap | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-xml | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | php-xmlrpc | 0:5.2.9-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-contrib | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-debuginfo | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-devel | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-docs | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-jdbc | 0:8.2.509-2jpp.el5s2 |
| Red Hat rhel application stack 2 | postgresql-jdbc-debuginfo | 0:8.2.509-2jpp.el5s2 |
| Red Hat rhel application stack 2 | postgresql-libs | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-plperl | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-plpython | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-pltcl | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-python | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-server | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-tcl | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresql-test | 0:8.2.13-2.el5s2 |
| Red Hat rhel application stack 2 | postgresqlclient81 | 0:8.1.17-1.el5s2 |
| Red Hat rhel application stack 2 | postgresqlclient81-debuginfo | 0:8.1.17-1.el5s2 |