Skip to content

CVE-2007-5969 MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit D...

HighCVSS 7.1 EPSS 14.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

Affected products

ProductAffected versionsFixed in
mysql server = 5.1.22 No fix listed
mysql server = 6.0 No fix listed
mysql server = 6.0.1 No fix listed
mysql server = 6.0.2 No fix listed
mysql server = 6.0.3 No fix listed
mysql community server <= 5.0.50 No fix listed
mysql community server = 5.0.41 No fix listed
mysql community server = 5.0.44 No fix listed
mysql community server = 5.0.45 No fix listed
mysql enterprise server = 5.0.50 No fix listed

References