Ingo Strüwing reported another problem related to CVE-2008-2079 / CVE-2008-4098. A user with with privileges to CREATE / DROP tables in some MySQL database with shell access to the database server can remove data file for other tables using MyISAM storage engine, even in different databases. Issue was first mentioned in upstream bug: http://bugs.mysql.com/bug.php?id=39277 http://bugs.mysql.com/file.php?id=10707&text=1 Issue is tracked upstream via (previously public, but currently restricted) bug: http://bugs.mysql.com/bug.php?id=40980 Problem has not upstream fix yet. More details can be found in: https://bugzilla.redhat.com/show_bug.cgi?id=543619#c4
Mitigation: Disable use of table symbolic links in setups where (untrusted) database users with CREATE / DROP TABLE privileges also have a shell access to the database server. This can be achieved by adding 'symbolic-links=0' or 'skip-symbolic-links' to '[mysqld]' section of the my.cnf configuration file. See MySQL reference manual for further details: http://dev.mysql.com/doc/refman/5.0/en/symbolic-links-to-tables.html This was added as a default for future Fedora and RHEL versions (bug #553652).
Fixed upstream in 5.1.46: http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html via following commit: http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.1-bugteam/revision/3351.37.1
mysql-5.1.46-1.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/mysql-5.1.46-1.fc11
mysql-5.1.46-1.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/mysql-5.1.46-1.fc12
mysql-5.1.46-1.fc13 has been submitted as an update for Fedora 13. http://admin.fedoraproject.org/updates/mysql-5.1.46-1.fc13
mysql-5.1.46-1.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.
mysql-5.1.46-1.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report.
mysql-5.1.46-1.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.
Created attachment 415408 [details] Patch backported to 5.0.77, EL5
This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2010:0442 https://rhn.redhat.com/errata/RHSA-2010-0442.html