sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mysql | Mysql | 5.0.5 | 5.0.5 |
Mysql | Mysql | 5.0.10 | 5.0.10 |
Mysql | Mysql | 5.0.54 | 5.0.54 |
Mysql | Mysql | 5.0.0 | 5.0.0 |
Mysql | Mysql | 5.1.23 | 5.1.23 |
Mysql | Mysql | 5.0.15 | 5.0.15 |
Mysql | Mysql | 5.0.17 | 5.0.17 |
Mysql | Mysql | 5.0.5.0.21 | 5.0.5.0.21 |
Mysql | Mysql | 5.0.3 | 5.0.3 |
Mysql | Mysql | 5.0.44 | 5.0.44 |
Mysql | Mysql | 5.0.66 | 5.0.66 |
Mysql | Mysql | 5.0.56 | 5.0.56 |
Mysql | Mysql | 5.0.60 | 5.0.60 |
Mysql | Mysql | 5.0.24 | 5.0.24 |
Mysql | Mysql | 6.0.9 | 6.0.9 |
Mysql | Mysql | 5.0.2 | 5.0.2 |
Mysql | Mysql | 5.0.22.1.0.1 | 5.0.22.1.0.1 |
Mysql | Mysql | 5.0.30 | 5.0.30 |
Mysql | Mysql | 5.0.20 | 5.0.20 |
Mysql | Mysql | 5.0.1 | 5.0.1 |
Mysql | Mysql | 5.0.4 | 5.0.4 |
Mysql | Mysql | 5.0.82 | 5.0.82 |
Mysql | Mysql | 5.0.36 | 5.0.36 |
Mysql | Mysql | 5.1.32 | 5.1.32 |
Mysql | Mysql | 5.0.16 | 5.0.16 |
Mysql | Mysql | 5.1.5 | 5.1.5 |
Mysql | Oracle | 6.0.0 | 6.0.0 |
Mysql | Oracle | 6.0.1 | 6.0.1 |
Mysql | Oracle | 6.0.2 | 6.0.2 |
Mysql | Oracle | 6.0.3 | 6.0.3 |
Mysql | Oracle | 6.0.4 | 6.0.4 |
Mysql | Oracle | 5.0.50 | 5.0.50 |
Mysql | Oracle | 5.0.51 | 5.0.51 |
Mysql | Oracle | 5.0.0 | 5.0.0 |
Mysql | Oracle | 5.0.3 | 5.0.3 |
Mysql | Oracle | 5.0.6 | 5.0.6 |
Mysql | Oracle | 5.0.11 | 5.0.11 |
Mysql | Oracle | 5.0.12 | 5.0.12 |
Mysql | Oracle | 5.0.13 | 5.0.13 |
Mysql | Oracle | 5.0.14 | 5.0.14 |
Mysql | Oracle | 5.0.18 | 5.0.18 |
Mysql | Oracle | 5.0.19 | 5.0.19 |
Mysql | Oracle | 5.0.21 | 5.0.21 |
Mysql | Oracle | 5.0.22 | 5.0.22 |
Mysql | Oracle | 5.0.23 | 5.0.23 |
Mysql | Oracle | 5.0.25 | 5.0.25 |
Mysql | Oracle | 5.0.26 | 5.0.26 |
Mysql | Oracle | 5.0.27 | 5.0.27 |
Mysql | Oracle | 5.0.30 | 5.0.30 |
Mysql | Oracle | 5.0.32 | 5.0.32 |
Mysql | Oracle | 5.0.33 | 5.0.33 |
Mysql | Oracle | 5.0.37 | 5.0.37 |
Mysql | Oracle | 5.0.38 | 5.0.38 |
Mysql | Oracle | 5.0.41 | 5.0.41 |
Mysql | Oracle | 5.0.42 | 5.0.42 |
Mysql | Oracle | 5.0.45 | 5.0.45 |
Mysql | Oracle | 5.0.52 | 5.0.52 |
Mysql | Oracle | 5.0.7 | 5.0.7 |
Mysql | Oracle | 5.0.8 | 5.0.8 |
Mysql | Oracle | 5.0.75 | 5.0.75 |
Mysql | Oracle | 5.0.77 | 5.0.77 |
Mysql | Oracle | 5.0.81 | 5.0.81 |
Mysql | Oracle | 5.1 | 5.1 |
Mysql | Oracle | 5.1.1 | 5.1.1 |
Mysql | Oracle | 5.1.2 | 5.1.2 |
Mysql | Oracle | 5.1.3 | 5.1.3 |
Mysql | Oracle | 5.1.4 | 5.1.4 |
Mysql | Oracle | 5.1.6 | 5.1.6 |
Mysql | Oracle | 5.1.7 | 5.1.7 |
Mysql | Oracle | 5.1.8 | 5.1.8 |
Mysql | Oracle | 5.1.9 | 5.1.9 |
Mysql | Oracle | 5.1.10 | 5.1.10 |
Mysql | Oracle | 5.1.11 | 5.1.11 |
Mysql | Oracle | 5.1.12 | 5.1.12 |
Mysql | Oracle | 5.1.13 | 5.1.13 |
Mysql | Oracle | 5.1.14 | 5.1.14 |
Mysql | Oracle | 5.1.15 | 5.1.15 |
Mysql | Oracle | 5.1.16 | 5.1.16 |
Mysql | Oracle | 5.1.17 | 5.1.17 |
Mysql | Oracle | 5.1.18 | 5.1.18 |
Mysql | Oracle | 5.1.19 | 5.1.19 |
Mysql | Oracle | 5.1.20 | 5.1.20 |
Mysql | Oracle | 5.1.21 | 5.1.21 |
Mysql | Oracle | 5.1.22 | 5.1.22 |
Mysql | Oracle | 5.1.30 | 5.1.30 |
Mysql | Oracle | 5.0.83 | 5.0.83 |