NVD

Id
3955  
Name
CVE-2008-4097  
Description
MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-2079.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-09-18  
Modified Date
2012-10-30  
Seq
2008-4097  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
25156 3955 CVE-2008-4097 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25  View
25157 3955 CVE-2008-4097 SUSE-SR:2008:025  View
25158 3955 CVE-2008-4097 MDVSA-2009:094  View
25159 3955 CVE-2008-4097 [oss-security] 20080909 Re: CVE request: MySQL incomplete fix for CVE-2008-2079  View
25160 3955 CVE-2008-4097 [oss-security] 20080916 Re: CVE request: MySQL incomplete fix for CVE-2008-2079  View
25161 3955 CVE-2008-4097 USN-671-1  View
25162 3955 CVE-2008-4097 mysql-myisam-symlinks-security-bypass(45648)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49546 JVNDB-2008-004856 MySQL における特権のチェックを回避される脆弱性 MySQL には、特権のチェックを回避される脆弱性が存在します。 CVE-2008-4097 34210 CVE-2008-4097 3955 4.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004856.html 2008-09-18 2012-09-25 View