Home > Vulnerability Database > CVE-2008-2079

Mend.io Vulnerability Database

CVE-2008-2079

Date: May 5, 2008

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.

Severity Score

5.0

Related Resources (36)

Url: http://secunia.com/advisories/31066

Url: http://bugs.mysql.com/bug.php?id=32167

Url: http://www.securitytracker.com/id?1019995

Url: https://access.redhat.com/security/cve/CVE-2008-2079

Url: http://www.securityfocus.com/bid/29106

Url: http://secunia.com/advisories/31226

Url: http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html

Url: http://secunia.com/advisories/31687

Url: http://secunia.com/advisories/30134

Url: http://support.apple.com/kb/HT3216

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2008:150

Url: http://www.redhat.com/support/errata/RHSA-2008-0510.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-2079

Url: http://www.redhat.com/support/errata/RHSA-2008-0505.html

Url: http://www.debian.org/security/2008/dsa-1608

Url: http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html

Url: http://www.vupen.com/english/advisories/2008/2780

Url: http://secunia.com/advisories/32222

Url: http://secunia.com/advisories/36701

Url: http://www.redhat.com/support/errata/RHSA-2008-0768.html

Url: http://www.ubuntu.com/usn/USN-671-1

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/42267

Url: http://www.redhat.com/support/errata/RHSA-2009-1289.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133

Url: http://secunia.com/advisories/32769

Url: http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2008:149

Url: http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Url: http://secunia.com/advisories/36566

Url: http://www.securityfocus.com/bid/31681

Url: http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html

Url: http://support.apple.com/kb/HT3865

Url: http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html

Url: http://www.vupen.com/english/advisories/2008/1472/references

Url: http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

Url: https://www.mend.io/vulnerability-database/CVE-2008-2079

Severity Score

5.0

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:	5.0
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	4.6
Access Vector (AV):	NETWORK
Access Complexity (AC):	HIGH
Authentication (AU):	SINGLE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2008-2079

Date: May 5, 2008

Severity Score

Related Resources (36)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?