PT-2006-5042 · Oracle+1 · Mysql Server+1

Michal Prokopiuk

·

Publicado

2006-08-18

·

Atualizado

2024-06-15

·

CVE-2006-4226

CVSS v2.0

3.6

Baixa

VetorAV:N/AC:H/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions MySQL versions prior to 4.1.21 MySQL versions prior to 5.0.25 MySQL versions prior to 5.1.12
Description The issue allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions, but only when run on case-sensitive filesystems.
Recommendations For versions prior to 4.1.21, update to version 4.1.21 or later. For versions prior to 5.0.25, update to version 5.0.25 or later. For versions prior to 5.1.12, update to version 5.1.12 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-4226
DSA-1169
OPENSUSE-SU-2024:11038-1
RHSA-2007:0083
RHSA-2007:0152
RHSA-2007_0152
SUSE-RU-2023:3956-1
SUSE-RU-2023:4991-1

Produtos afetados

Mysql Server
Red Hat