PT-2006-6382 · Mysql Server+1 · Mysql Server+1

Published 2006-11-03 · Updated 2017-07-20 · CVE-2006-5675

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Pentaho Business Intelligence (BI) Suite versions prior to 1.2 RC3 (1.2.0.470-RC3)

Description: The issue is related to "MySQL Scripts need changes for security," and is possibly associated with SQL injection vulnerabilities. The impact and attack vectors of these vulnerabilities are unknown.

Recommendations: For versions prior to 1.2 RC3 (1.2.0.470-RC3), update to version 1.2 RC3 (1.2.0.470-RC3) or later to resolve the issue. As a temporary workaround, consider reviewing and modifying the MySQL scripts to address potential security concerns. Restrict access to sensitive data and databases to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-5675

Affected Products

Mysql Server

Pentaho Business Intelligence Suite

References · 6

• 🔥 https://exploit-db.com/exploits/9958 · Exploit
• http://sourceforge.net/project/shownotes.php?group_id=140317&release_id=456313 · Patch
• http://securityfocus.com/bid/20806 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-5675 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39999 · Note
• http://vupen.com/english/advisories/2006/4252 · Note