CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.6
CWE Name:  Permissions Privileges and Access Controls
Summary: mysql 5.0.51a allows local users to bypass certain privilege checks by calling create table on a myisam table with modified (1) data directory or (2) index directory arguments that are associated with symlinks within pathnames for subdirectories of the mysql home data directory, which are followed when tables are created in the future. note: this vulnerability exists because of an incomplete fix for cve-2008-2079. per http://www.securityfocus.com/bid/29106 this vulnerability is remotely exploitable.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2008-09-18
Last Modified Date: 2017-08-08