CVE-2007-5969: mysql community_server

Modified

Published 10-12-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-5969 is a high (CVSS 7.1) vulnerability in mysql community_server. EPSS estimates a 14.26% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.1/10

010

High · v2.0 (NVD)

EPSS score

14.26%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 6 · Related 3

DSA-1451-1 OPENSUSE-SU-2024:11038-1 RHSA-2007:1155 RHSA-2007:1157 SUSE-RU-2023:3956-1 SUSE-RU-2023:4991-1

Timeline

10-12-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

CVSS metrics

1 score · 1 source · 1 version

v2.07.1

EPSS trend

Probability

14.26%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 14.26% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (lists.mysql.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Version check

Known conditions: network-reachable, authentication (CVSS vector). Other conditions: not stated in public data.

Mysql3 products

community_server≤ 5.0.50 | 5.0.41 | 5.0.44 | 5.0.45
mysql_enterprise_server5.0.50
mysql_server5.1.22 | 6.0 | 6.0.1 | 6.0.2 | 6.0.3

1 vendor · 3 products

References

41 links

secunia.com/advisories/28343Third Party AdvisoryX Refsource SECUNIAVendor Advisory
security.gentoo.org/glsa/glsa-200804-04.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/29706Third Party AdvisoryX Refsource SECUNIAVendor Advisory
bugs.mysql.com/32111X Refsource CONFIRM
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10509VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/31681VDB EntryX Refsource BIDPatch
dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-51.htmlX Refsource CONFIRM
www.debian.org/security/2008/dsa-1451Vendor AdvisoryX Refsource DEBIAN
dev.mysql.com/doc/refman/4.1/en/news-4-1-24.htmlX Refsource CONFIRM
www.securitytracker.com/id?1019060VDB EntryX Refsource SECTRACK

Show all 41 references

www.vupen.com/english/advisories/2007/4142VDB EntryX Refsource VUPENVendor Advisory
usn.ubuntu.com/559-1/Vendor AdvisoryX Refsource UBUNTU
www.securityfocus.com/archive/1/486477/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2008/1000/referencesVDB EntryX Refsource VUPENVendor Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959Vendor AdvisoryX Refsource SLACKWARE
www.vupen.com/english/advisories/2008/0560/referencesVDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/bid/26765VDB EntryX Refsource BID
www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/28040Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2007-1157.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28099Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28559Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/32222Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27981Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/4198VDB EntryX Refsource VUPENVendor Advisory
www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.htmlVendor AdvisoryX Refsource FEDORA
dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.htmlX Refsource CONFIRM
lists.mysql.com/announce/495Mailing ListX Refsource MLISTExploitVendor Advisory
www.redhat.com/support/errata/RHSA-2007-1155.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/28108Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28025Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/2780VDB EntryX Refsource VUPENVendor Advisory
forums.mysql.com/read.php?3%2C186931%2C186931X Refsource CONFIRM
secunia.com/advisories/28838Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28128Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:243Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/28063Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.htmlVendor AdvisoryX Refsource SUSE
lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLE
support.apple.com/kb/HT3216X Refsource CONFIRM
issues.rpath.com/browse/RPL-1999X Refsource CONFIRM