NetSight
IP …
high7.1

CVE-2007-5969

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table reli…

Impact

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

Affected products

VendorProductAffected versions
MysqlMysql Server
Versions 5.1.22, 6.0, 6.0.1, 6.0.2, 6.0.3
MysqlCommunity Server
through 5.0.50
Versions 5.0.41, 5.0.44, 5.0.45
MysqlMysql Enterprise Server
Version 5.0.50

Weakness classification

CWE-264

References