CVE catalog

CVE-2008-2079

mysql-dfsg-5.0 - authorization bypass

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.59% · Oct 25, 2026

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future. mysql: privilege escalation via DATA/INDEX DIRECTORY directives This issue did not affect MySQL as supplied with Red Hat Enterprise Linux 3. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmysql-dfsg-5.04.05.0.32-7etch1vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch3vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch3~bpo31+1vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch4vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch5vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch5~bpo31+1vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch6fixed
Debianmysql-dfsg-5.05.05.0.51a-9+lenny2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmysql-dfsg-5.0deb4.05.0.32-7etch6Not reportedDSA-1608-1Not reported
Debianmysql-dfsg-5.0deb5.05.0.51a-9+lenny2Not reportedDTSA-150-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]