{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-20T00:00:00", "descriptions": [{"lang": "en", "value": "MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-10T00:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "mysql-grant-execute-privilege-escalation(28442)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"name": "ADV-2006-3306", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"name": "SUSE-SR:2006:023", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"name": "oval:org.mitre.oval:def:10105", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}, {"name": "USN-338-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"name": "21506", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21506"}, {"name": "19559", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19559"}, {"name": "22080", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22080"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"name": "21770", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21770"}, {"name": "30351", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/30351"}, {"name": "1016709", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016709"}, {"name": "RHSA-2007:0083", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"name": "RHSA-2008:0364", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"name": "[commits] 20060620 bk commit into 5.0 tree (kroki:1.2168) BUG#18630", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.mysql.com/commits/7918"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2006-4227", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "mysql-grant-execute-privilege-escalation(28442)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"name": "ADV-2006-3306", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"name": "SUSE-SR:2006:023", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"name": "oval:org.mitre.oval:def:10105", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}, {"name": "USN-338-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"name": "21506", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21506"}, {"name": "19559", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19559"}, {"name": "22080", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22080"}, {"name": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html", "refsource": "CONFIRM", "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"name": "21770", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21770"}, {"name": "30351", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/30351"}, {"name": "1016709", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016709"}, {"name": "RHSA-2007:0083", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"name": "RHSA-2008:0364", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"name": "http://bugs.mysql.com/bug.php?id=18630", "refsource": "CONFIRM", "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"name": "[commits] 20060620 bk commit into 5.0 tree (kroki:1.2168) BUG#18630", "refsource": "MLIST", "url": "http://lists.mysql.com/commits/7918"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:57:46.439Z"}, "title": "CVE Program Container", "references": [{"name": "mysql-grant-execute-privilege-escalation(28442)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"name": "ADV-2006-3306", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"name": "SUSE-SR:2006:023", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"name": "oval:org.mitre.oval:def:10105", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}, {"name": "USN-338-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"name": "21506", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21506"}, {"name": "19559", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19559"}, {"name": "22080", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22080"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"name": "21770", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21770"}, {"name": "30351", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/30351"}, {"name": "1016709", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016709"}, {"name": "RHSA-2007:0083", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"name": "RHSA-2008:0364", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"name": "[commits] 20060620 bk commit into 5.0 tree (kroki:1.2168) BUG#18630", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.mysql.com/commits/7918"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-4227", "datePublished": "2006-08-18T19:55:00", "dateReserved": "2006-08-18T00:00:00", "dateUpdated": "2024-08-07T18:57:46.439Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "B77A2761-2B44-4061-9C29-A54F90A1AD83", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "754B78F2-A03C-40BE-812B-F5E57B93D20B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "665E063D-355D-4A5A-A05F-36BF582DE36F", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "214E3CF9-6362-4F5A-91B7-5E69564F7144", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*", "matchCriteriaId": "F4C6CD84-EA5D-451F-AFC3-5F7094F0017D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "35BED939-3366-4CBF-B6BF-29C0C42E97F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*", "matchCriteriaId": "19001041-22C4-4D2C-A918-378DACBB1DF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "88FEEE64-899F-4F55-B829-641706E29E32", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "5EB2323C-EFE2-407A-9AE9-8717FA9F8625", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*", "matchCriteriaId": "6341F695-6034-4CC1-9485-ACD3A0E1A079", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."}, {"lang": "es", "value": "MySQL anterior a 5.0.25 y 5.1 anterior a 5.1.12 eval\u00faa los argumentos de rutinas suid en el contexto de seguridad del creador de la rutina en lugar del de aquel que llama a la rutina, lo que permite a usuarios autenticados remotamente escalar privilegios a trav\u00e9s de una rutina que ha sido puesta a su disposici\u00f3n utilizando GRANT EXECUTE."}], "id": "CVE-2006-4227", "lastModified": "2024-11-21T00:15:26.370", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-08-18T20:04:00.000", "references": [{"source": "[email protected]", "tags": ["Exploit"], "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"source": "[email protected]", "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"source": "[email protected]", "url": "http://lists.mysql.com/commits/7918"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21506"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21770"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22080"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/30351"}, {"source": "[email protected]", "url": "http://securitytracker.com/id?1016709"}, {"source": "[email protected]", "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"source": "[email protected]", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/19559"}, {"source": "[email protected]", "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"source": "[email protected]", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.mysql.com/commits/7918"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21506"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21770"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22080"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/30351"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016709"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/19559"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}], "sourceIdentifier": "[email protected]", "vendorComments": [{"comment": "This issue did not affect the versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n\nIssue was addressed in MySQL packages as shipped in Red Hat Enterprise Linux 5 via:\n\nhttps://rhn.redhat.com/errata/RHSA-2008-0364.html", "lastModified": "2008-07-25T00:00:00", "organization": "Red Hat"}], "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2008:0364", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "mysql-0:5.0.45-7.el5", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2008-05-20T00:00:00Z"}, {"advisory": "RHSA-2007:0083", "cpe": "cpe:/a:redhat:rhel_application_stack:1", "package": "mysql-0:5.0.30-1.el4s1.1", "product_name": "Red Hat Web Application Stack for RHEL 4", "release_date": "2007-02-19T00:00:00Z"}], "bugzilla": {"description": "mysql improper suid argument evaluation", "id": "216427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=216427"}, "csaw": false, "details": ["MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."], "name": "CVE-2006-4227", "public_date": "2006-03-29T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2006-4227\nhttps://nvd.nist.gov/vuln/detail/CVE-2006-4227"], "statement": "This issue did not affect the versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.", "threat_severity": "Moderate"}