|
|
| |
|
| |
mysql: access restriction bypass
| Package(s): | mysql |
CVE #(s): | CVE-2008-7247
|
| Created: | February 2, 2010 |
Updated: | November 16, 2010 |
| Description: |
From the CVE entry:
sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink. |
| Alerts: |
|
( Log in to post comments)
|
|
|