Unscored severity · published Dec 10, 2007
CVE-2007-5969
MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks…
–
CVSS
14.3%
EPSS
No
On KEV
Description
MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.
Exploitation
Is it being used?
Exploit prediction (EPSS)14.3% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Community Server · Mysql
through 5.0.50; 5.0.41; 5.0.44; 5.0.45 · source: NVD
ME
Mysql Enterprise Server · Mysql
5.0.50 · source: NVD
MS
Mysql Server · Mysql
5.1.22; 6.0; 6.0.1; 6.0.2; 6.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5969
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5969
bugs.mysql.com
http://bugs.mysql.com/32111
dev.mysql.com
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html
dev.mysql.com
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51.html
dev.mysql.com
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html
forums.mysql.com
http://forums.mysql.com/read.php?3%2C186931%2C186931
lists.apple.com
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
More from Community Server
–
CVE-2007-3780
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol
–
CVE-2007-3781
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to…
–
CVE-2007-3782
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table