CVE-2007-5970

MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.

Link	Resource
http://bugs.mysql.com/bug.php?id=32091
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html
http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html
http://securitytracker.com/id?1019084
http://osvdb.org/42607
http://www.vupen.com/english/advisories/2008/0560/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/38988

Configuration 1

cpe:2.3:a:oracle:mysql:6.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:6.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:6.0.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:6.0.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:6.0.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*

---

Published : 2007-12-10 07:46

Updated : 2019-12-17 08:06

---

NVD link : CVE-2007-5970

Mitre link : CVE-2007-5970

No products.

NVD-CWE-Other