CVE-2007-5969: High severity MySQL MySQL Server vulnerability
MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5969?
CVE-2007-5969 is classified as a medium severity vulnerability.
How do I fix CVE-2007-5969?
To fix CVE-2007-5969, upgrade MySQL Community Server to version 5.0.51 or higher, or Enterprise Server to version 5.0.52 or higher.
What versions of MySQL are affected by CVE-2007-5969?
CVE-2007-5969 affects MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4.
Who can exploit CVE-2007-5969?
CVE-2007-5969 can be exploited by remote authenticated users.
What is the nature of the vulnerability in CVE-2007-5969?
CVE-2007-5969 allows remote authenticated users to overwrite system tables if a MySQL table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options.