VDB

CVE-2006-4227

CVE-2006-4227 PUBLISHED

Reported by mitre · Published August 18, 2006

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a, *, n/a

Exploit Intelligence

Timeline

  • Aug 18, 2006 CVE Published
  • Feb 4, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • May 25, 2023 EPSS Score
  • Jun 22, 2023 EPSS Score
  • Sep 8, 2023 EPSS Score
  • Dec 22, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›