Your submission was sent successfully! Close

CVE-2008-2079

Published: 5 May 2008

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.

Priority

Low

Status

Package Release Status
mysql-dfsg-5.0
Launchpad, Ubuntu, Debian
dapper
Released (5.0.22-0ubuntu6.06.11)
feisty Needed
(reached end-of-life)
gutsy
Released (5.0.45-1ubuntu3.4)
hardy
Released (5.0.51a-3ubuntu5.4)
intrepid Not vulnerable
(5.0.67-0ubuntu5)
upstream
Released (5.0.60)