CVE-2006-4227
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 12.5%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 12.47% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- mysql/mysql · oracle/mysql
- Source
- cve@mitre.org
References
- http://bugs.mysql.com/bug.php?id=18630Exploit
- http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html
- http://lists.mysql.com/commits/7918
- http://secunia.com/advisories/21506Vendor Advisory
- http://secunia.com/advisories/21770Vendor Advisory
- http://secunia.com/advisories/22080Vendor Advisory
- http://secunia.com/advisories/30351Vendor Advisory
- http://securitytracker.com/id?1016709
- http://www.novell.com/linux/security/advisories/2006_23_sr.html
- http://www.redhat.com/support/errata/RHSA-2007-0083.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0364.htmlVendor Advisory
- http://www.securityfocus.com/bid/19559Exploit
- http://www.ubuntu.com/usn/usn-338-1
- http://www.vupen.com/english/advisories/2006/3306Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28442
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105
- http://bugs.mysql.com/bug.php?id=18630Exploit
- http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html
- http://lists.mysql.com/commits/7918
- http://secunia.com/advisories/21506Vendor Advisory
- http://secunia.com/advisories/21770Vendor Advisory
- http://secunia.com/advisories/22080Vendor Advisory
- http://secunia.com/advisories/30351Vendor Advisory
- http://securitytracker.com/id?1016709
- http://www.novell.com/linux/security/advisories/2006_23_sr.html
- http://www.redhat.com/support/errata/RHSA-2007-0083.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0364.htmlVendor Advisory
- http://www.securityfocus.com/bid/19559Exploit
- http://www.ubuntu.com/usn/usn-338-1
- http://www.vupen.com/english/advisories/2006/3306Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.