CVE-2007-5970 Privilege escalation in n/a
Authenticated users can escalate privileges on arbitrary tables by exploiting partitioned table creation with directory options.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-5970?
CVE-2007-5970 is a medium-severity vulnerability in Oracle Mysql, published on 10 Dec 2007. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.
Which versions are affected by CVE-2007-5970?
It affects 1 product.
Products include Oracle Mysql.
How do I fix CVE-2007-5970?
Upgrade to a fixed version.
Is CVE-2007-5970 being exploited?
There is no known exploitation of CVE-2007-5970 in the wild and no public exploit code.
Other vulnerabilities in Oracle Mysql
Sources
Also known as GHSA-4pw7-3p8h-fr77.