CVE-2009-4030
Fixed in a distro release EPSS <1%
MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.
Products: mysql, oracle mysql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 4.0 | mysql-dfsg-5.0 | 5.0.32-7etch12 |
| Debian 5.0 | mysql-dfsg-5.0 | 5.0.51a-24+lenny3 |
| Red Hat Enterprise Linux 4 | mysql | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 4 | mysql-bench | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 4 | mysql-debuginfo | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 4 | mysql-devel | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 4 | mysql-server | 0:4.1.22-2.el4_8.3 |
| Red Hat Enterprise Linux 5 | mysql | 0:5.0.77-4.el5_4.2 |
| Red Hat Enterprise Linux 5 | mysql-bench | 0:5.0.77-4.el5_4.2 |
| Red Hat Enterprise Linux 5 | mysql-debuginfo | 0:5.0.77-4.el5_4.2 |
| Red Hat Enterprise Linux 5 | mysql-devel | 0:5.0.77-4.el5_4.2 |
| Red Hat Enterprise Linux 5 | mysql-server | 0:5.0.77-4.el5_4.2 |
| Red Hat Enterprise Linux 5 | mysql-test | 0:5.0.77-4.el5_4.2 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | mariadb104 | 10.4.30-150100.3.5.10 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | python-mysqlclient | 1.4.6-150100.3.3.7 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | lz4 | 1.8.0-3.5.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb-connector-c | 3.1.22-2.35.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | mariadb104 | 10.4.30-8.5.46 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | python-mysqlclient | 1.3.14-8.9.2 |
| openSUSE Tumbleweed | mariadb | 10.0.22-3.8 |