CVE-2006-4031Mysql vulnerability

7 documents5 sources
Severity
2.1LOWNVD
EPSS
0.2%
top 53.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 9
Latest updateMay 1

Description

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages2 packages

NVDmysql/mysql21 versions+20
NVDoracle/mysql125 versions+124

Patches

🔴Vulnerability Details

1
GHSA
GHSA-qqjv-c795-8pr6: MySQL 42022-05-01

📋Vendor Advisories

2
Ubuntu
MySQL vulnerabilities2006-09-05
Red Hat
MySQL improper permission revocation2005-11-23

💬Community

3
Bugzilla
CVE-2006-4031 MySQL improper permission revocation2006-08-15
Bugzilla
CVE-2006-4031 MySQL improper permission revocation2006-08-11
Bugzilla
CVE-2006-4031 MySQL improper permission revocation2006-08-11
CVE-2006-4031 — Mysql vulnerability | cvebase