CVE-2007-5969

2007-12-1019:46:00

CWE-264

mitre

web.nvd.nist.gov

mysql

server

remote access

unauthorized access

symlink

cve-2007-5969

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

AI Score

5.7

Confidence

Low

EPSS

0.028

Percentile

90.9%

JSON

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

Affected configurations

Nvd

Node

mysqlmysql_serverMatch5.1.22

mysqlmysql_serverMatch6.0

mysqlmysql_serverMatch6.0.1

mysqlmysql_serverMatch6.0.2

mysqlmysql_serverMatch6.0.3

Node

mysqlcommunity_serverRange≤5.0.50

mysqlcommunity_serverMatch5.0.41

mysqlcommunity_serverMatch5.0.44

mysqlcommunity_serverMatch5.0.45

Node

mysqlmysql_enterprise_serverMatch5.0.50

VendorProductVersionCPE
mysqlmysql_server5.1.22cpe:2.3:a:mysql:mysql_server:5.1.22:*:*:*:*:*:*:*
mysqlmysql_server6.0cpe:2.3:a:mysql:mysql_server:6.0:*:*:*:*:*:*:*
mysqlmysql_server6.0.1cpe:2.3:a:mysql:mysql_server:6.0.1:*:*:*:*:*:*:*
mysqlmysql_server6.0.2cpe:2.3:a:mysql:mysql_server:6.0.2:*:*:*:*:*:*:*
mysqlmysql_server6.0.3cpe:2.3:a:mysql:mysql_server:6.0.3:*:*:*:*:*:*:*
mysqlcommunity_server*cpe:2.3:a:mysql:community_server:*:*:*:*:*:*:*:*
mysqlcommunity_server5.0.41cpe:2.3:a:mysql:community_server:5.0.41:*:*:*:*:*:*:*
mysqlcommunity_server5.0.44cpe:2.3:a:mysql:community_server:5.0.44:*:*:*:*:*:*:*
mysqlcommunity_server5.0.45cpe:2.3:a:mysql:community_server:5.0.45:*:*:*:*:*:*:*
mysqlmysql_enterprise_server5.0.50cpe:2.3:a:mysql:mysql_enterprise_server:5.0.50:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mysql	mysql_server	5.1.22	cpe:2.3:a:mysql:mysql_server:5.1.22:::::::*
mysql	mysql_server	6.0	cpe:2.3:a:mysql:mysql_server:6.0:::::::*
mysql	mysql_server	6.0.1	cpe:2.3:a:mysql:mysql_server:6.0.1:::::::*
mysql	mysql_server	6.0.2	cpe:2.3:a:mysql:mysql_server:6.0.2:::::::*
mysql	mysql_server	6.0.3	cpe:2.3:a:mysql:mysql_server:6.0.3:::::::*
mysql	community_server	*	cpe:2.3:a:mysql:community_server::::::::
mysql	community_server	5.0.41	cpe:2.3:a:mysql:community_server:5.0.41:::::::*
mysql	community_server	5.0.44	cpe:2.3:a:mysql:community_server:5.0.44:::::::*
mysql	community_server	5.0.45	cpe:2.3:a:mysql:community_server:5.0.45:::::::*
mysql	mysql_enterprise_server	5.0.50	cpe:2.3:a:mysql:mysql_enterprise_server:5.0.50:::::::*