[ MDVSA-2010:044 ] mysql

[dude67]

_______________________________________________________________________

Package : mysql
Date : February 19, 2010
Affected: 2009.1, 2010.0
_______________________________________________________________________

Problem Description:

A vulnerabilitiy has been found and corrected in mysql:

MySQL is vulnerable to a symbolic link attack when the data home
directory contains a symlink to a different filesystem which allows
remote authenticated users to bypass intended access restrictions
(CVE-2008-7247).

The updated packages have been patched to correct these issues.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-7247
_______________________________________________________________________