mysql服务器rename table系统表格覆盖漏洞_ÖйúºÚ¿ÍÁªÃË - http://www.ChinaHacker.Com...

ÊÜÓ°Ïìϵͳ£º

MySQL AB MySQL < 5.0.51

²»ÊÜÓ°Ïìϵͳ£º

MySQL AB MySQL 5.0.51

ÃèÊö£º

--------------------------------------------------------------------------------

BUGTRAQ ID: 26765

CVE(CAN) ID: CVE-2007-5969

MySQLÊÇÒ»¿îʹÓ÷dz£¹ã·ºµÄ¿ª·ÅÔ´´úÂë¹ØϵÊý¾Ý¿âϵͳ£¬ÓµÓи÷ÖÖƽ̨µÄÔËÐа汾¡£

MySQLÔÚijЩÅäÖÃÇé¿öÏ´æÔÚ©¶´£¬±¾µØ¹¥»÷Õß¿ÉÄÜÀûÓôË©¶´ÐÞ¸ÄÆÆ»µÊý¾Ý±í¡£

Èç¹û±í¸ñÉèÖÃÁËDATA DIRECTORYºÍINDEX DIRECTORYÑ¡ÏîµÄ»°£¬MySQL·þÎñÆ÷ÔÚʹÓÃRENAME TABLEÓï¾äÖØÐÂÃüÃû¸Ã±í¸ñʱ´æÔÚ´íÎ󣬿ÉÄÜÔÊÐí¹¥»÷Õßͨ¹ýijЩ·ûºÅÁ´½ÓÌæ»»ËùÖ¸ÏòµÄÎļþµ¼Ö¸²¸Çϵͳ±í¸ñÐÅÏ¢¡£

Á´½Ó£ºhttp://secunia.com/advisories/27981/

http://forums.mysql.com/read.php?3,186931,186931

*>

½¨Ò飺

--------------------------------------------------------------------------------

³§É̲¹¶¡£º

MySQL AB

--------

Ä¿Ç°³§ÉÌÒѾ­·¢²¼ÁËÉý¼¶²¹¶¡ÒÔÐÞ¸´Õâ¸ö°²È«ÎÊÌ⣬Çëµ½³§É̵ÄÖ÷Ò³ÏÂÔØ£º

http://dev.mysql.com/get/Downloads/MySQL-5.0/mysql-5.0.51.tar.gz/from/pick