• info
• discussion
• exploit
• solution
• references

MySQL MyISAM Table Privileges Secuity Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu libmysqlclient15-dev_5.0.45-1ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15-dev_5.0.45-1ubuntu3.4_powerpc.deb


• Ubuntu libmysqlclient15off_5.0.45-1ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15off_5.0.45-1ubuntu3.4_powerpc.deb


• Ubuntu mysql-client-5.0_5.0.45-1ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent-5.0_5.0.45-1ubuntu3.4_powerpc.deb


• Ubuntu mysql-client_5.0.45-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent_5.0.45-1ubuntu3.4_all.deb


• Ubuntu mysql-common_5.0.45-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-com mon_5.0.45-1ubuntu3.4_all.deb


• Ubuntu mysql-server-5.0_5.0.45-1ubuntu3.4_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver-5.0_5.0.45-1ubuntu3.4_powerpc.deb


• Ubuntu mysql-server_5.0.45-1ubuntu3.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver_5.0.45-1ubuntu3.4_all.deb

Mandriva Linux Mandrake 2008.0

• Mandriva libmysql-devel-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libmysql-static-devel-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libmysql15-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-bench-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-client-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-common-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-max-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-extra-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-management-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-storage-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-tools-5.0.45-8.3mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 amd64

• Debian libmysqlclient15-dev_5.0.32-7etch8_amd64.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_amd64.deb


• Debian libmysqlclient15off_5.0.32-7etch8_amd64.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_amd64.deb


• Debian mysql-client-5.0_5.0.32-7etch8_amd64.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_amd64.deb


• Debian mysql-client_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb


• Debian mysql-common_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb


• Debian mysql-server-4.1_5.0.32-7etch8_amd64.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_amd64.deb


• Debian mysql-server-5.0_5.0.32-7etch8_amd64.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_amd64.deb


• Debian mysql-server_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Debian Linux 4.0 ia-32

• Debian libmysqlclient15-dev_5.0.32-7etch8_i386.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_i386.deb


• Debian libmysqlclient15off_5.0.32-7etch8_i386.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_i386.deb


• Debian mysql-client-5.0_5.0.32-7etch8_i386.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_i386.deb


• Debian mysql-client_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb


• Debian mysql-common_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb


• Debian mysql-server-4.1_5.0.32-7etch8_i386.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_i386.deb


• Debian mysql-server-5.0_5.0.32-7etch8_i386.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_i386.deb


• Debian mysql-server_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva lib64mysql-devel-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64mysql-static-devel-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64mysql15-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-bench-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-client-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-common-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-doc-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-max-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-extra-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-management-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-storage-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-tools-5.0.77-0.2mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 mips

• Debian libmysqlclient15-dev_5.0.32-7etch8_mips.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_mips.deb


• Debian libmysqlclient15off_5.0.32-7etch8_mips.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_mips.deb


• Debian mysql-client-5.0_5.0.32-7etch8_mips.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_mips.deb


• Debian mysql-client_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb


• Debian mysql-common_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb


• Debian mysql-server-4.1_5.0.32-7etch8_mips.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_mips.deb


• Debian mysql-server-5.0_5.0.32-7etch8_mips.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_mips.deb


• Debian mysql-server_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Mandriva Linux Mandrake 2008.1 x86_64

• Mandriva lib64mysql-devel-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64mysql-static-devel-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64mysql15-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-bench-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-client-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-common-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-doc-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-max-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-extra-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-management-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-storage-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-tools-5.0.51a-8.2mdv2008.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

• Debian libmysqlclient15-dev_5.0.32-7etch8_arm.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_arm.deb


• Debian libmysqlclient15off_5.0.32-7etch8_arm.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_arm.deb


• Debian mysql-client-5.0_5.0.32-7etch8_arm.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_arm.deb


• Debian mysql-client_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb


• Debian mysql-common_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb


• Debian mysql-server-4.1_5.0.32-7etch8_arm.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_arm.deb


• Debian mysql-server-5.0_5.0.32-7etch8_arm.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_arm.deb


• Debian mysql-server_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Mandriva Linux Mandrake 2008.1

• Mandriva libmysql-devel-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libmysql-static-devel-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libmysql15-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-bench-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-client-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-common-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-doc-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-max-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-extra-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-management-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-storage-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva mysql-ndb-tools-5.0.51a-8.2mdv2008.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

• Debian libmysqlclient15-dev_5.0.32-7etch8_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_powerpc.deb


• Debian libmysqlclient15off_5.0.32-7etch8_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_powerpc.deb


• Debian mysql-client-5.0_5.0.32-7etch8_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_powerpc.deb


• Debian mysql-client_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb


• Debian mysql-common_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb


• Debian mysql-server-4.1_5.0.32-7etch8_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_powerpc.deb


• Debian mysql-server-5.0_5.0.32-7etch8_powerpc.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_powerpc.deb


• Debian mysql-server_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Debian Linux 4.0 m68k

• Debian mysql-client_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb


• Debian mysql-common_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb


• Debian mysql-server_5.0.32-7etch8_all.deb
  http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Apple Mac OS X Server 10.5.5

• Apple SecUpdSrvr2008-007.dmg
  http://www.apple.com/support/downloads/securityupdate2008007serverleop ard.html