NVD

Id
62868  
Name
CVE-2006-4227  
Description
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine"s definer instead of the routine"s caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-18  
Modified Date
2011-09-01  
Seq
2006-4227  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326879 62868 CVE-2006-4227 http://bugs.mysql.com/bug.php?id=18630  View
326880 62868 CVE-2006-4227 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html  View
326881 62868 CVE-2006-4227 [commits] 20060620 bk commit into 5.0 tree (kroki:1.2168) BUG#18630  View
326882 62868 CVE-2006-4227 oval:org.mitre.oval:def:10105  View
326883 62868 CVE-2006-4227 1016709  View
326884 62868 CVE-2006-4227 SUSE-SR:2006:023  View
326885 62868 CVE-2006-4227 RHSA-2007:0083  View
326886 62868 CVE-2006-4227 RHSA-2008:0364  View
326887 62868 CVE-2006-4227 19559  View
326888 62868 CVE-2006-4227 USN-338-1  View
326889 62868 CVE-2006-4227 ADV-2006-3306  View
326890 62868 CVE-2006-4227 mysql-grant-execute-privilege-escalation(28442)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57921 JVNDB-2006-000117 MySQL の suid ルーチンにおける不正に権限を取得される脆弱性 ------------ CVE-2006-4227 20329 CVE-2006-4227 62868 6.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000117.html 2006-02-22 2008-06-06 View