PT-2006-4875 · Oracle+1 · Mysql Server+1

Christian Hammers + 1 · Published 2006-08-09 · Updated 2019-12-17 · CVE-2006-4031

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MySQL versions 4.1 through 4.1.20 MySQL versions 5.0 through 5.0.23

Description A local user can access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, potentially violating intended security policy.

Recommendations For MySQL versions 4.1 through 4.1.20, update to version 4.1.21 or later. For MySQL versions 5.0 through 5.0.23, update to version 5.0.24 or later.

Exploit

Fix

Related Identifiers

CVE-2006-4031

RHSA-2007:0083

RHSA-2008:0364

RHSA-2008:0768

RHSA-2008_0364

RHSA-2008_0768

Affected Products

Mysql Server

Red Hat

References · 47

• 🔥 http://bugs.mysql.com/bug.php?id=15195 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4031 · Security Note
• http://secunia.com/advisories/21259 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0364.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0083.html · Vendor Advisory
• http://dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html · Patch
• http://mandriva.com/security/advisories?name=MDKSA-2006:149 · Vendor Advisory
• http://securityfocus.com/bid/19279 · Patch
• http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html · Patch
• http://securitytracker.com/id?1016617 · Patch
• http://ubuntu.com/usn/usn-338-1 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_23_sr.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0768.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2007-2583 · Note