MySQL MyISAM Table Privileges Secuity Bypass Vulnerability

MySQL MyISAM Table Privileges Secuity Bypass Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

NOTE: This issue was incompletely fixed several times. Please make sure to install the latest patches for this issue.

Ubuntu Ubuntu Linux 7.10 powerpc

Ubuntu libmysqlclient15-dev_5.0.45-1ubuntu3.4_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15-dev_5.0.45-1ubuntu3.4_powerpc.deb

Ubuntu libmysqlclient15off_5.0.45-1ubuntu3.4_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15off_5.0.45-1ubuntu3.4_powerpc.deb

Ubuntu mysql-client-5.0_5.0.45-1ubuntu3.4_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent-5.0_5.0.45-1ubuntu3.4_powerpc.deb

Ubuntu mysql-client_5.0.45-1ubuntu3.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent_5.0.45-1ubuntu3.4_all.deb

Ubuntu mysql-common_5.0.45-1ubuntu3.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-com mon_5.0.45-1ubuntu3.4_all.deb

Ubuntu mysql-server-5.0_5.0.45-1ubuntu3.4_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver-5.0_5.0.45-1ubuntu3.4_powerpc.deb

Ubuntu mysql-server_5.0.45-1ubuntu3.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver_5.0.45-1ubuntu3.4_all.deb

Debian Linux 4.0 amd64

Debian libmysqlclient15-dev_5.0.32-7etch8_amd64.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_amd64.deb

Debian libmysqlclient15off_5.0.32-7etch8_amd64.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_amd64.deb

Debian mysql-client-5.0_5.0.32-7etch8_amd64.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_amd64.deb

Debian mysql-client_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb

Debian mysql-common_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb

Debian mysql-server-4.1_5.0.32-7etch8_amd64.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_amd64.deb

Debian mysql-server-5.0_5.0.32-7etch8_amd64.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_amd64.deb

Debian mysql-server_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Debian Linux 4.0 ia-32

Debian libmysqlclient15-dev_5.0.32-7etch8_i386.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_i386.deb

Debian libmysqlclient15off_5.0.32-7etch8_i386.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_i386.deb

Debian mysql-client-5.0_5.0.32-7etch8_i386.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_i386.deb

Debian mysql-client_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb

Debian mysql-common_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb

Debian mysql-server-4.1_5.0.32-7etch8_i386.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_i386.deb

Debian mysql-server-5.0_5.0.32-7etch8_i386.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_i386.deb

Debian mysql-server_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

MandrakeSoft Linux Mandrake 2009.0 x86_64

Mandriva lib64mysql-devel-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64mysql-static-devel-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64mysql15-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-bench-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-client-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-common-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-doc-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-max-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-extra-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-management-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-storage-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-tools-5.0.77-0.2mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0 mips

Debian libmysqlclient15-dev_5.0.32-7etch8_mips.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_mips.deb

Debian libmysqlclient15off_5.0.32-7etch8_mips.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_mips.deb

Debian mysql-client-5.0_5.0.32-7etch8_mips.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_mips.deb

Debian mysql-client_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb

Debian mysql-common_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb

Debian mysql-server-4.1_5.0.32-7etch8_mips.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_mips.deb

Debian mysql-server-5.0_5.0.32-7etch8_mips.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_mips.deb

Debian mysql-server_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

MandrakeSoft Linux Mandrake 2008.1 x86_64

Mandriva lib64mysql-devel-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64mysql-static-devel-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva lib64mysql15-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-bench-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-client-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-common-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-doc-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-max-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-extra-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-management-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-storage-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-tools-5.0.51a-8.2mdv2008.1.x86_64.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0 arm

Debian libmysqlclient15-dev_5.0.32-7etch8_arm.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_arm.deb

Debian libmysqlclient15off_5.0.32-7etch8_arm.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_arm.deb

Debian mysql-client-5.0_5.0.32-7etch8_arm.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_arm.deb

Debian mysql-client_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb

Debian mysql-common_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb

Debian mysql-server-4.1_5.0.32-7etch8_arm.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_arm.deb

Debian mysql-server-5.0_5.0.32-7etch8_arm.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_arm.deb

Debian mysql-server_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

MandrakeSoft Linux Mandrake 2008.1

Mandriva libmysql-devel-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libmysql-static-devel-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva libmysql15-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-bench-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-client-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-common-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-doc-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-max-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-extra-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-management-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-storage-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Mandriva mysql-ndb-tools-5.0.51a-8.2mdv2008.1.i586.rpm
http://www.mandriva.com/en/download/

Debian Linux 4.0 powerpc

Debian libmysqlclient15-dev_5.0.32-7etch8_powerpc.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15-dev_5.0.32-7etch8_powerpc.deb

Debian libmysqlclient15off_5.0.32-7etch8_powerpc.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/libmysql client15off_5.0.32-7etch8_powerpc.deb

Debian mysql-client-5.0_5.0.32-7etch8_powerpc.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient-5.0_5.0.32-7etch8_powerpc.deb

Debian mysql-client_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb

Debian mysql-common_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb

Debian mysql-server-4.1_5.0.32-7etch8_powerpc.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-4.1_5.0.32-7etch8_powerpc.deb

Debian mysql-server-5.0_5.0.32-7etch8_powerpc.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver-5.0_5.0.32-7etch8_powerpc.deb

Debian mysql-server_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Debian Linux 4.0 m68k

Debian mysql-client_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-cl ient_5.0.32-7etch8_all.deb

Debian mysql-common_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-co mmon_5.0.32-7etch8_all.deb

Debian mysql-server_5.0.32-7etch8_all.deb
http://security.debian.org/pool/updates/main/m/mysql-dfsg-5.0/mysql-se rver_5.0.32-7etch8_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

Ubuntu libmysqlclient15-dev_5.0.51a-3ubuntu5.4_lpia.deb
http://ports.ubuntu.com/pool/main/m/mysql-dfsg-5.0/libmysqlclient15-de v_5.0.51a-3ubuntu5.4_lpia.deb

Ubuntu libmysqlclient15off_5.0.51a-3ubuntu5.4_lpia.deb
http://ports.ubuntu.com/pool/main/m/mysql-dfsg-5.0/libmysqlclient15off _5.0.51a-3ubuntu5.4_lpia.deb

Ubuntu mysql-client-5.0_5.0.51a-3ubuntu5.4_lpia.deb
http://ports.ubuntu.com/pool/main/m/mysql-dfsg-5.0/mysql-client-5.0_5. 0.51a-3ubuntu5.4_lpia.deb

Ubuntu mysql-client_5.0.51a-3ubuntu5.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent_5.0.51a-3ubuntu5.4_all.deb

Ubuntu mysql-common_5.0.51a-3ubuntu5.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-com mon_5.0.51a-3ubuntu5.4_all.deb

Ubuntu mysql-server-5.0_5.0.51a-3ubuntu5.4_lpia.deb
http://ports.ubuntu.com/pool/main/m/mysql-dfsg-5.0/mysql-server-5.0_5. 0.51a-3ubuntu5.4_lpia.deb

Ubuntu mysql-server_5.0.51a-3ubuntu5.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver_5.0.51a-3ubuntu5.4_all.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

Ubuntu libmysqlclient15-dev_5.0.22-0ubuntu6.06.11_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15-dev_5.0.22-0ubuntu6.06.11_i386.deb

Ubuntu libmysqlclient15off_5.0.22-0ubuntu6.06.11_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15off_5.0.22-0ubuntu6.06.11_i386.deb

Ubuntu mysql-client-5.0_5.0.22-0ubuntu6.06.11_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent-5.0_5.0.22-0ubuntu6.06.11_i386.deb

Ubuntu mysql-client_5.0.22-0ubuntu6.06.11_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent_5.0.22-0ubuntu6.06.11_all.deb

Ubuntu mysql-common_5.0.22-0ubuntu6.06.11_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-com mon_5.0.22-0ubuntu6.06.11_all.deb

Ubuntu mysql-server-5.0_5.0.22-0ubuntu6.06.11_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver-5.0_5.0.22-0ubuntu6.06.11_i386.deb

Ubuntu mysql-server_5.0.22-0ubuntu6.06.11_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver_5.0.22-0ubuntu6.06.11_all.deb

Ubuntu Ubuntu Linux 7.10 lpia

Ubuntu libmysqlclient15-dev_5.0.45-1ubuntu3.4_lpia.deb
http://ports.ubuntu.com/pool/main/m/mysql-dfsg-5.0/libmysqlclient15-de v_5.0.45-1ubuntu3.4_lpia.deb

Ubuntu libmysqlclient15off_5.0.45-1ubuntu3.4_lpia.deb
http://ports.ubuntu.com/pool/main/m/mysql-dfsg-5.0/libmysqlclient15off _5.0.45-1ubuntu3.4_lpia.deb

Ubuntu mysql-client-5.0_5.0.45-1ubuntu3.4_lpia.deb
http://ports.ubuntu.com/pool/main/m/mysql-dfsg-5.0/mysql-client-5.0_5. 0.45-1ubuntu3.4_lpia.deb

Ubuntu mysql-client_5.0.45-1ubuntu3.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent_5.0.45-1ubuntu3.4_all.deb

Ubuntu mysql-common_5.0.45-1ubuntu3.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-com mon_5.0.45-1ubuntu3.4_all.deb

Ubuntu mysql-server-5.0_5.0.45-1ubuntu3.4_lpia.deb
http://ports.ubuntu.com/pool/main/m/mysql-dfsg-5.0/mysql-server-5.0_5. 0.45-1ubuntu3.4_lpia.deb

Ubuntu mysql-server_5.0.45-1ubuntu3.4_all.deb
http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver_5.0.45-1ubuntu3.4_all.deb

Apple Mac OS X Server 10.5.5

Apple SecUpdSrvr2008-007.dmg
http://www.apple.com/support/downloads/securityupdate2008007serverleop ard.html