CVE-2007-5969: MySQL Community Server

High severity, CVSS 7.1. EPSS: 14.3% chance of exploitation in the next 30 days.

MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to overwrite system table information and gain privileges via a RENAME TABLE statement that changes the symlink to point to an existing file.

Affected products

• MySQL Community Server: up to and including 5.0.50; version 5.0.41 only; version 5.0.44 only; version 5.0.45 only
• MySQL MySQL Enterprise Server: version 5.0.50 only
• MySQL MySQL Server: version 5.1.22 only; version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only

Published 2007-12-10. Last modified 2026-06-16.