CVE

Id
16473  
CVE No.
CVE-2006-0369  
Status
Candidate  
Description
** DISPUTED ** MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access.  
Phase
Assigned (20060122)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
132306 16473 CVE-2006-0369 BUGTRAQ:20060120 MySQL 5.0 information leak?  View
132307 16473 CVE-2006-0369 URL:http://www.securityfocus.com/archive/1/archive/1/422491/100/0/threaded  View
132308 16473 CVE-2006-0369 BUGTRAQ:20060121 RE: MySQL 5.0 information leak?  View
132309 16473 CVE-2006-0369 URL:http://www.securityfocus.com/archive/1/422592/100/0/threaded  View
132310 16473 CVE-2006-0369 BUGTRAQ:20060121 Re: MySQL 5.0 information leak?  View
132311 16473 CVE-2006-0369 URL:http://www.securityfocus.com/archive/1/422698/100/0/threaded  View
132312 16473 CVE-2006-0369 BUGTRAQ:20060123 RE: MySQL 5.0 information leak?  View
132313 16473 CVE-2006-0369 URL:http://www.securityfocus.com/archive/1/archive/1/423228/100/0/threaded  View
132314 16473 CVE-2006-0369 BUGTRAQ:20060124 Re: MySQL 5.0 information leak?  View
132315 16473 CVE-2006-0369 URL:http://www.securityfocus.com/archive/1/archive/1/423204/100/0/threaded  View
132316 16473 CVE-2006-0369 BUGTRAQ:20060128 Re: MySQL 5.0 information leak?  View
132317 16473 CVE-2006-0369 URL:http://www.securityfocus.com/archive/1/archive/1/423432/100/0/threaded  View
132318 16473 CVE-2006-0369 BUGTRAQ:20060122 Re: MySQL 5.0 information leak?  View

Related JVN