CVE-2007-5969

high · 7.1

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

7.1

CVSS

14.3%

EPSS (exploit prob.)

96th

EPSS percentile

2007-12-10

Published

AV:N/AC:H/Au:S/C:C/I:C/A:C

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
mysql	mysql_server	5.1.22
mysql	mysql_server	6.0
mysql	mysql_server	6.0.1
mysql	mysql_server	6.0.2
mysql	mysql_server	6.0.3
mysql	community_server	<= 5.0.50
mysql	community_server	5.0.41
mysql	community_server	5.0.44
mysql	community_server	5.0.45
mysql	mysql_enterprise_server	5.0.50

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-5969