CVE-2006-4227
published 2006-08-18CVE-2006-4227: MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's…
PriorityP342medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
11.76%
95.5th percentile
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| mysql | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
| oracle | mysql | — | — |
CVSS provenance
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vendor_redhat6.5MEDIUM
vendor_ubuntu2.1LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
MySQL vulnerabilities
vendor_ubuntu·2006-09-05·CVSS 2.1
CVE-2006-4031 [LOW] MySQL vulnerabilities
Title: MySQL vulnerabilities
Summary: MySQL vulnerabilities
Dmitri Lenev discovered that arguments of setuid SQL functions were
evaluated in the security context of the functions' definer instead of
its caller. An authenticated user with the privilege to call such a
function could exploit this to execute arbitrary statements with the
privileges of the definer of that function. (CVE-2006-4227)
Peter Gulutzan reported a potentially confusing situation of the MERGE
table engine. If an user creates a merge table, and the administrator
later revokes privileges on the original table only (without changing
the privileges on the merge table), that user still has access to the
data by using the merge table. This is intended behaviour, but might
be undesirable in some installations; this update i
Red Hat
mysql improper suid argument evaluation
vendor_redhat·2006-03-29·CVSS 6.5
CVE-2006-4227 [MEDIUM] mysql improper suid argument evaluation
mysql improper suid argument evaluation
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.
Statement: This issue did not affect the versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.
GHSA
GHSA-pq6p-m3qv-7m6j: MySQL before 5
ghsa_unreviewed·2022-05-01
CVE-2006-4227 [MEDIUM] CWE-20 GHSA-pq6p-m3qv-7m6j: MySQL before 5
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.
No detection rules found.
No writeups or analysis indexed.
http://bugs.mysql.com/bug.php?id=18630http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.htmlhttp://lists.mysql.com/commits/7918http://secunia.com/advisories/21506http://secunia.com/advisories/21770http://secunia.com/advisories/22080http://secunia.com/advisories/30351http://securitytracker.com/id?1016709http://www.novell.com/linux/security/advisories/2006_23_sr.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0083.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0364.htmlhttp://www.securityfocus.com/bid/19559http://www.ubuntu.com/usn/usn-338-1http://www.vupen.com/english/advisories/2006/3306https://exchange.xforce.ibmcloud.com/vulnerabilities/28442https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105http://bugs.mysql.com/bug.php?id=18630http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.htmlhttp://lists.mysql.com/commits/7918http://secunia.com/advisories/21506http://secunia.com/advisories/21770http://secunia.com/advisories/22080http://secunia.com/advisories/30351http://securitytracker.com/id?1016709http://www.novell.com/linux/security/advisories/2006_23_sr.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0083.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0364.htmlhttp://www.securityfocus.com/bid/19559http://www.ubuntu.com/usn/usn-338-1http://www.vupen.com/english/advisories/2006/3306https://exchange.xforce.ibmcloud.com/vulnerabilities/28442https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105
2006-08-18
Published