Lucene search
FreeBSDA0E92718-6603-11DB-AB90-000E35FD8194HistoryAug 09, 2006 - 12:00 a.m.
mysql -- database "case-sensitive" privilege escalation
2006-08-0900:00:00
vuxml.freebsd.org
15
CVSS2
3.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:P/A:N
EPSS
0.005
Percentile
75.9%
Michal Prokopiuk reports a privilege escalation in MySQL.
The vulnerability causes MySQL, when run on case-sensitive
filesystems, to allow remote and local authenticated users
to create or access a database when the database name
differs only in case from a database for which they have
permissions.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | mysql-server | = 5.1 | UNKNOWN |
| FreeBSD | any | noarch | mysql-server | < 5.1.12 | UNKNOWN |
References
Related
nessus
nessus
FreeBSD : mysql -- database 'case-sensitive' privilege escalation (a0e92718-6603-11db-ab90-000e35fd8194)
2006-10-30 00:00:00
Oracle Linux 4 : mysql (ELSA-2007-0152)
2013-07-12 00:00:00
MySQL < 4.1.21 / 5.0.25 / 5.1.12 Access Control
2012-01-16 00:00:00
cvelist
cvelist
CVE-2006-4226
2006-08-18 19:55:00
cve
cve
CVE-2006-4226
2006-08-18 20:04:00
nvd
nvd
CVE-2006-4226
2006-08-18 20:04:00
openvas
openvas
FreeBSD Ports: mysql-server
2008-09-04 00:00:00
FreeBSD Ports: mysql-server
2008-09-04 00:00:00
Debian Security Advisory DSA 1169-1 (mysql-dfsg-4.1)
2008-01-17 00:00:00
redhat
redhat
(RHSA-2007:0152) Moderate: mysql security update
2007-04-03 00:00:00
(RHSA-2007:0083) Low: mysql security update
2007-02-19 00:00:00
veracode
veracode
Unauthorized Access
2020-04-10 00:14:20
centos
centos
mysql security update
2007-04-04 00:06:56
ubuntucve
ubuntucve
CVE-2006-4226
2006-08-18 00:00:00
oraclelinux
oraclelinux
Moderate: mysql security update
2007-04-04 00:00:00
debian
debian
[SECURITY] [DSA 1169-1] New MySQL 4.1 packages fix several vulnerabilities
2006-09-05 06:08:29
osv
osv
mysql-dfsg-4.1 - several
2006-09-05 00:00:00
CVSS2
3.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:S/C:P/I:P/A:N
EPSS
0.005
Percentile
75.9%
Related for A0E92718-6603-11DB-AB90-000E35FD8194