The host is running MySQL and is prone to Access restrictions Bypass Vulnerability

Successful exploitation could allow users to bypass intended access restrictions by calling CREATE TABLE with DATA DIRECTORY or INDEX DIRECTORY argument referring to a subdirectory. Impact Level: Application

Upgrade to MySQL version 5.1.41 For updates refer to http://dev.mysql.com/downloads

The flaw is due to an error while calling CREATE TABLE on a MyISAM table with modified DATA DIRECTORY or INDEX DIRECTORY.

MySQL 5.1.x before 5.1.41 on all running platform.

• http://bugs.mysql.com/bug.php?id=32167
• http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html

---

Updated on 2015-03-25