mysql-dfsg: symlink traversal
| Package(s): | mysql-dfsg-5.0 |
CVE #(s): | CVE-2008-4098
CVE-2008-4097
|
| Created: | November 6, 2008 |
Updated: | June 4, 2010 |
| Description: |
From the Debian advisory: A symlink traversal vulnerability was discovered in MySQL, a relational database server. The weakness could permit an attacker having both CREATE TABLE access to a database and the ability to
execute shell commands on the database server to bypass MySQL access
controls, enabling them to write to tables in databases to which they
would not ordinarily have access.
|
| Alerts: |
| Ubuntu |
USN-1397-1 |
mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 |
2012-03-12 |
| Gentoo |
201201-02 |
mysql |
2012-01-05 |
| Pardus |
2010-73 |
mysql-server |
2010-06-04 |
| Red Hat |
RHSA-2010:0109-01 |
mysql |
2010-02-16 |
| Mandriva |
MDVSA-2010:012 |
mysql |
2010-01-17 |
| Mandriva |
MDVSA-2010:011 |
mysql |
2010-01-17 |
| CentOS |
CESA-2010:0110 |
mysql |
2010-02-17 |
| Ubuntu |
USN-897-1 |
mysql-dfsg-5.0, mysql-dfsg-5.1 |
2010-02-10 |
| Mandriva |
MDVSA-2009:326 |
mysql |
2009-12-07 |
| CentOS |
CESA-2010:0109 |
mysql |
2010-03-01 |
| Red Hat |
RHSA-2010:0110-01 |
mysql |
2010-02-16 |
| Red Hat |
RHSA-2009:1067-01 |
Red Hat Application Stack |
2009-05-26 |
| Mandriva |
MDVSA-2009:094 |
mysql |
2009-04-22 |
| Ubuntu |
USN-671-1 |
mysql-dfsg-5.0 |
2008-11-17 |
| SuSE |
SUSE-SR:2008:025 |
apache2, ipsec-tools, kernel-bigsmp, flash-player, mysql, ktorrent |
2008-11-14 |
| SuSE |
SUSE-SR:2009:001 |
ethereal/wireshark, mysql, imap, rsyslog, courier-authlib, nfs-utils, libxml2, python, jhead, git, samba, vinagre, opera |
2009-01-12 |
| Debian |
DSA-1662-1 |
mysql-dfsg-5.0 |
2008-11-06 |
|
