CVE-2008-4097

CVE-2008-4097 describes a privilege bypass vulnerability in MySQL 5.0.51a. Local authenticated users can exploit this by using CREATE TABLE with manipulated DATA DIRECTORY or INDEX DIRECTORY arguments containing symlinks within subdirectories of the MySQL home data directory, leading to future table creation in unintended locations. The vulnerability has a CVSS score of 4.6, indicating a medium severity. It requires authentication (Au:S) and high attack complexity (AC:H), but successful exploitation can lead to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no known exploit intelligence, including Metasploit or Nuclei modules, and no public exploit code on ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or active exploitation.