Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MySQL Improper Link Resolution Before File Access (Link Following) Vulnerability - CVE-2008-4098 - Vulnerability Database
MySQL

MySQL Improper Link Resolution Before File Access (Link Following) Vulnerability - CVE-2008-4098

Medium
Reference: CVE-2008-4098
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-4098
Title: MySQL Improper Link Resolution Before File Access (Link Following) Vulnerability
Overview:

MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097.