NVD

Id
51183  
Name
CVE-2009-4030  
Description
MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4098 and CVE-2008-2079.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-11-30  
Modified Date
2011-01-14  
Seq
2009-4030  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259638 51183 CVE-2009-4030 http://bugs.mysql.com/bug.php?id=32167  View
259639 51183 CVE-2009-4030 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html  View
259640 51183 CVE-2009-4030 APPLE-SA-2010-03-29-1  View
259641 51183 CVE-2009-4030 [commits] 20091110 bzr commit into mysql-5.0-bugteam branch (joro:2845) Bug#32167  View
259642 51183 CVE-2009-4030 SUSE-SR:2010:011  View
259643 51183 CVE-2009-4030 SUSE-SR:2010:021  View
259644 51183 CVE-2009-4030 [oss-security] 20091124 Re: mysql-5.1.41  View
259645 51183 CVE-2009-4030 [oss-security] 20091124 Re: mysql-5.1.41  View
259646 51183 CVE-2009-4030 oval:org.mitre.oval:def:11116  View
259647 51183 CVE-2009-4030 oval:org.mitre.oval:def:8156  View
259648 51183 CVE-2009-4030 http://support.apple.com/kb/HT4077  View
259649 51183 CVE-2009-4030 USN-897-1  View
259650 51183 CVE-2009-4030 DSA-1997  View
259651 51183 CVE-2009-4030 [oss-security] 20091119 mysql-5.1.41  View
259652 51183 CVE-2009-4030 [oss-security] 20091124 Re: mysql-5.1.41  View
259653 51183 CVE-2009-4030 RHSA-2010:0109  View
259654 51183 CVE-2009-4030 RHSA-2010:0110  View
259655 51183 CVE-2009-4030 ADV-2010-1107  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41392 JVNDB-2009-002399 MySQL における権限チェックを回避される脆弱性 MySQL には、変更された DATA DIRECTORY または INDEX DIRECTORY 引数をもつ MyISAM テーブル上で CREATE TABLE を呼び出すことにより、権限チェックを回避される脆弱性が存在します。 CVE-2009-4030 41461 CVE-2009-4030 51183 4.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002399.html 2009-11-05 2010-04-15 View