Vulnerability Details : CVE-2008-2079
MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are within the MySQL home data directory, which can point to tables that are created in the future.
Threat overview for CVE-2008-2079
Top countries where our scanners detected CVE-2008-2079
Top open port discovered on systems with this issue
3306
IPs affected by CVE-2008-2079 12,571
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2008-2079!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2008-2079
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 8 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2008-2079
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.6
|
MEDIUM | AV:N/AC:H/Au:S/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
CWE ids for CVE-2008-2079
-
Assigned by: nvd@nist.gov (Primary)
Vendor statements for CVE-2008-2079
-
Red Hat 2009-09-02This issue did not affect MySQL as supplied with Red Hat Enterprise Linux 3. This issue was addressed for Red Hat Enterprise Linux 4, 5, and Red Hat Application Stack v1, v2: https://rhn.redhat.com/cve/CVE-2008-2079.html
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10133
Third Party Advisory
-
http://www.mandriva.com/security/advisories?name=MDVSA-2008:149
Third Party Advisory
-
http://www.vupen.com/english/advisories/2008/1472/references
Third Party Advisory
-
http://www.securityfocus.com/bid/29106
Patch;Third Party Advisory;VDB Entry
-
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-60.html
Vendor Advisory
-
http://dev.mysql.com/doc/refman/6.0/en/news-6-0-5.html
Vendor Advisory
-
http://www.ubuntu.com/usn/USN-671-1
Third Party Advisory
-
http://www.securitytracker.com/id?1019995
Third Party Advisory;VDB Entry
-
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-24.html
Vendor Advisory
-
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
Mailing List;Third Party Advisory
-
http://www.redhat.com/support/errata/RHSA-2008-0510.html
Third Party Advisory
-
http://support.apple.com/kb/HT3865
About Security Update 2009-005 - Apple SupportThird Party Advisory
-
http://www.debian.org/security/2008/dsa-1608
Third Party Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/42267
Third Party Advisory;VDB Entry
-
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-24.html
Vendor Advisory
-
http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
Mailing List;Third Party Advisory
-
http://www.mandriva.com/security/advisories?name=MDVSA-2008:150
Third Party Advisory
-
http://www.vupen.com/english/advisories/2008/2780
Webmail: access your OVH emails on ovhcloud.com | OVHcloudThird Party Advisory
-
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
Third Party Advisory
-
http://bugs.mysql.com/bug.php?id=32167
Exploit;Patch;Vendor Advisory
-
http://www.redhat.com/support/errata/RHSA-2009-1289.html
Third Party Advisory
-
http://www.redhat.com/support/errata/RHSA-2008-0768.html
Third Party Advisory
-
http://support.apple.com/kb/HT3216
About Security Update 2008-007 - Apple SupportThird Party Advisory
-
http://www.securityfocus.com/bid/31681
Patch;Third Party Advisory;VDB Entry
-
http://www.redhat.com/support/errata/RHSA-2008-0505.html
SupportThird Party Advisory
- cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*