Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2008-4097
HistorySep 18, 2008 - 3:04 p.m.

CVE-2008-4097

2008-09-1815:04:27
CWE-264
redhat
web.nvd.nist.gov
66
mysql
privilege checks
cve-2008-4097
security vulnerability
nvd

CVSS2

4.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

35.0%

JSON

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.

Affected configurations

Nvd
Node
oraclemysqlMatch5.0.51a
VendorProductVersionCPE
oraclemysql5.0.51acpe:2.3:a:oracle:mysql:5.0.51a:*:*:*:*:*:*:*

Related

prion 4
nvd 4
nessus 44
cvelist 4
osv 3
openvas 66
ubuntucve 4
freebsd 2
redhatcve 1
securityvulns 4
ubuntu 1
debian 3
cve 3
veracode 1
gentoo 2
redhat 4
seebug 1
oraclelinux 2
centos 1
suse 1
prion
prion
Privilege escalation
2008-09-18 15:04:00
Privilege escalation
2008-09-18 15:04:00
Privilege escalation
2008-05-05 16:20:00
nvd
nvd
CVE-2008-4097
2008-09-18 15:04:27
CVE-2008-4098
2008-09-18 15:04:27
CVE-2008-2079
2008-05-05 16:20:00
nessus
nessus
MySQL < 5.0.88 / 5.1.42 / 5.5.0 / 6.0.14 MyISAM CREATE TABLE Privilege Check Bypass
2012-01-16 00:00:00
FreeBSD : mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths (738f8f9e-d661-11dd-a765-0030843d3802)
2008-12-30 00:00:00
Ubuntu 6.06 LTS / 7.10 / 8.04 LTS : mysql-dfsg-5.0 vulnerabilities (USN-671-1)
2009-04-23 00:00:00
cvelist
cvelist
CVE-2008-4097
2008-09-17 18:06:00
CVE-2008-4098
2008-09-17 18:06:00
CVE-2008-2079
2008-05-05 16:00:00
osv
osv
mysql-dfsg-5.0 - authorization bypass
2008-07-13 00:00:00
mysql-dfsg-5.0 - authorization bypass
2008-11-06 00:00:00
libmariadbd-devel-10.6.4-2.1 on GA media
2024-06-15 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1608-1)
2008-07-15 00:00:00
FreeBSD Ports: mysql-server
2009-01-02 00:00:00
MySQL MyISAM Table Privileges Security Bypass Vulnerability
2009-04-23 00:00:00
ubuntucve
ubuntucve
CVE-2008-4097
2008-09-18 00:00:00
CVE-2008-4098
2008-09-18 00:00:00
CVE-2008-2079
2008-05-05 00:00:00
freebsd
freebsd
mysql -- MyISAM table privileges security bypass vulnerability for symlinked paths
2008-07-03 00:00:00
mysql -- MyISAM table privileges security bypass vulnerability
2008-05-05 00:00:00
redhatcve
redhatcve
CVE-2008-4097
2015-10-30 10:30:27
securityvulns
securityvulns
MySQL privilege escalation
2008-11-10 00:00:00
[SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-11-10 00:00:00
reporting CVE
2009-03-17 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2008-11-17 00:00:00
debian
debian
[SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-11-06 04:20:00
[SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-11-06 04:20:00
[SECURITY] [DSA 1608-1] New mysql-dfsg-5.0 packages fix authorization bypass
2008-07-13 04:55:16
cve
cve
CVE-2008-4098
2008-09-18 15:04:27
CVE-2008-2079
2008-05-05 16:20:00
CVE-2009-4030
2009-11-30 17:30:00
veracode
veracode
Privilege Escalation
2020-04-10 00:22:36
gentoo
gentoo
MySQL: Privilege bypass
2008-09-04 00:00:00
MySQL: Multiple vulnerabilities
2012-01-05 00:00:00
redhat
redhat
(RHSA-2008:0510) Moderate: Red Hat Application Stack v1.3 security and enhancement update
2008-07-02 00:00:00
(RHSA-2008:0768) Moderate: mysql security, bug fix, and enhancement update
2008-07-24 00:00:00
(RHSA-2009:1289) Moderate: mysql security and bug fix update
2009-09-02 09:47:12
seebug
seebug
MySQL MyISAM葨绕过权限检ζŸ₯漏洞
2008-05-12 00:00:00
oraclelinux
oraclelinux
mysql security and bug fix update
2009-09-08 00:00:00
mysql security, bug fix, and enhancement update
2008-08-01 00:00:00
centos
centos
mysql security update
2009-09-15 18:28:45
suse
suse
remote code execution in openwsman
2008-08-14 18:02:43

CVSS2

4.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

35.0%

JSON
Related for CVE-2008-4097
prion4nvd4nessus44cvelist4osv3openvas66ubuntucve4freebsd2redhatcve1securityvulns4ubuntu1debian3cve3veracode1gentoo2redhat4seebug1oraclelinux2centos1suse1