CVE-2007-5969

Advisory lineage Upstream: 0 Downstream: 6
Modified
Published: 10 Dec 2007, 19:00
Last modified:07 Aug 2024, 15:47

Vulnerability Summary

Overall Risk (default)
medium
39/100
CVSS Score
7.1 HIGH
v2.0 (nvd)
EPSS Score
1.81% LOW
2% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
1 found
Dark Web
Not detected

Timeline

10 Dec 2007, 19:00
Published
Vulnerability first disclosed
07 Aug 2024, 15:47
Last Modified
Vulnerability information updated

Description

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

CVSS Metrics

  • v2.0•HIGH•Score: 7.1AV:N/AC:H/Au:S/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 1.81%• Percentile: 83%

Techniques & Countermeasures

  • CWE-264•Permissions, Privileges, and Access Controls

    Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

  • mysql•community_server

    ≤ 5.0.50 | 5.0.41 | 5.0.44 | 5.0.45

  • mysql•mysql_enterprise_server

    5.0.50

  • mysql•mysql_server

    5.1.22 | 6.0 | 6.0.1 | 6.0.2 | 6.0.3

References (41)