CVE-2007-5970

Description

MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP1	mariadb104	10.4.30-150100.3.5.10	SUSE-RU-2023:3956-1
SLES 15 SP1	python-mysqlclient	1.4.6-150100.3.3.7	SUSE-RU-2023:3956-1
SLES 12 SP5	lz4	1.8.0-3.5.2	SUSE-RU-2023:4991-1
SLES 12 SP5	mariadb-connector-c	3.1.22-2.35.1	SUSE-RU-2023:4991-1
SLES 12 SP5	mariadb104	10.4.30-8.5.46	SUSE-RU-2023:4991-1
SLES 12 SP5	python-mysqlclient	1.3.14-8.9.2	SUSE-RU-2023:4991-1

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES for SAP 15 SP1	mariadb104	10.4.30-150100.3.5.10	SUSE-RU-2023:3956-1
SLES for SAP 15 SP1	python-mysqlclient	1.4.6-150100.3.3.7	SUSE-RU-2023:3956-1
SLES for SAP 12 SP5	lz4	1.8.0-3.5.2	SUSE-RU-2023:4991-1
SLES for SAP 12 SP5	mariadb-connector-c	3.1.22-2.35.1	SUSE-RU-2023:4991-1
SLES for SAP 12 SP5	mariadb104	10.4.30-8.5.46	SUSE-RU-2023:4991-1
SLES for SAP 12 SP5	python-mysqlclient	1.3.14-8.9.2	SUSE-RU-2023:4991-1
SLE HPC 15 SP1	mariadb104	10.4.30-150100.3.5.10	SUSE-RU-2023:3956-1
SLE HPC 15 SP1	python-mysqlclient	1.4.6-150100.3.3.7	SUSE-RU-2023:3956-1

openSUSE