NVD Vulnerability Detail
Search Exploit, PoC
CVE-2007-5969
Summary

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

Publication Date Dec. 11, 2007, 4:46 a.m.
Registration Date Jan. 29, 2021, 2:23 p.m.
Last Update Nov. 7, 2023, 11:01 a.m.
CVSS2.0 : HIGH
Score 7.1
Vector AV:N/AC:H/Au:S/C:C/I:C/A:C
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 高
攻撃前の認証要否(Au) 単一
機密性への影響(C) 高
完全性への影響(I) 高
可用性への影響(A) 高
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:mysql:mysql_server:6.0:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql_server:6.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql_server:6.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql_server:5.1.22:*:*:*:*:*:*:*
cpe:2.3:a:mysql:mysql_server:6.0.2:*:*:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:a:mysql:community_server:5.0.45:*:*:*:*:*:*:*
cpe:2.3:a:mysql:community_server:5.0.41:*:*:*:*:*:*:*
cpe:2.3:a:mysql:community_server:5.0.44:*:*:*:*:*:*:*
cpe:2.3:a:mysql:community_server:*:*:*:*:*:*:*:* 5.0.50
Configuration3 or higher or less more than less than
cpe:2.3:a:mysql:mysql_enterprise_server:5.0.50:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List