PT-2006-4875 · Oracle+1 · Mysql Server+1

Christian Hammers + 1 · Publicado 2006-08-09 · Atualizado 2019-12-17 · CVE-2006-4031

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MySQL versions 4.1 through 4.1.20 MySQL versions 5.0 through 5.0.23

Description A local user can access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, potentially violating intended security policy.

Recommendations For MySQL versions 4.1 through 4.1.20, update to version 4.1.21 or later. For MySQL versions 5.0 through 5.0.23, update to version 5.0.24 or later.

Exploit

Correção

Identificadores relacionados

CVE-2006-4031

RHSA-2007:0083

RHSA-2008:0364

RHSA-2008:0768

RHSA-2008_0364

RHSA-2008_0768

Produtos afetados

Mysql Server

Red Hat

Referências · 47

• 🔥 http://bugs.mysql.com/bug.php?id=15195 · Exploit
• https://access.redhat.com/security/cve/CVE-2007-2583 · Nota
• http://securityfocus.com/bid/19559 · Nota
• http://secunia.com/advisories/31226 · Nota
• http://secunia.com/advisories/21685 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4031 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2008-2079 · Nota
• https://access.redhat.com/security/cve/CVE-2006-0903 · Nota
• https://access.redhat.com/errata/RHSA-2008:0364 · Nota
• http://secunia.com/advisories/21259 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2007-3782 · Nota
• http://secunia.com/advisories/21627 · Nota
• http://securityfocus.com/bid/22900 · Nota
• https://access.redhat.com/security/cve/CVE-2006-3469 · Nota
• http://redhat.com/support/errata/RHSA-2008-0364.html · Aviso do Fabricante