Debian Security Advisory

DSA-1662-1 mysql-dfsg-5.0 -- authorization bypass

Date Reported:
06 Nov 2008
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 480292.
In Mitre's CVE dictionary: CVE-2008-4098.
More information:

A symlink traversal vulnerability was discovered in MySQL, a relational database server. The weakness could permit an attacker having both CREATE TABLE access to a database and the ability to execute shell commands on the database server to bypass MySQL access controls, enabling them to write to tables in databases to which they would not ordinarily have access.

The Common Vulnerabilities and Exposures project identifies this vulnerability as CVE-2008-4098. Note that a closely aligned issue, identified as CVE-2008-4097, was prevented by the update announced in DSA-1608-1. This new update supersedes that fix and mitigates both potential attack vectors.

For the stable distribution (etch), this problem has been fixed in version 5.0.32-7etch8.

We recommend that you upgrade your mysql packages.

Fixed in:

Debian GNU/Linux 4.0 (etch)

Architecture-independent component:
HP Precision:
Intel IA-32:
Intel IA-64:
Big-endian MIPS:
Little-endian MIPS:
IBM S/390:
Sun Sparc:

MD5 checksums of the listed files are available in the original advisory.