CVE-2008-4098: Medium severity ubuntu vulnerability
Devin Carraway of the Debian Security Team discovered that the upstream fix for the CVE-2008-2079 is incomplete and still makes it possible for local users to create tables via INDEX/DATA DIRECTORY directives in the MySQL data directory (/var/lib/mysql) via directory symlinks.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25
CVE-2008-2079 was tracked via bug bug #445222.
An attacker needs following to exploit this issue: - MySQL database account with privileges to create tables - shell access to the host running MySQL database with write access to a directory accessible by the mysqld daemon process
Other sources
MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4098?
CVE-2008-4098 has been classified as a moderate severity vulnerability.
How do I fix CVE-2008-4098?
To mitigate CVE-2008-4098, it is recommended to upgrade MySQL to version 5.0.67 or later.
What software is affected by CVE-2008-4098?
CVE-2008-4098 affects MySQL versions before 5.0.67 and specific distributions of Linux including Red Hat and Ubuntu.
Can CVE-2008-4098 be exploited remotely?
No, CVE-2008-4098 can only be exploited by local users on the affected system.
What is the impact of CVE-2008-4098 on MySQL databases?
CVE-2008-4098 allows local users to bypass certain privilege checks, potentially leading to unauthorized access to data.