CVE-2006-4031

MySQL improper permission revocation

Published Aug 9, 2006 CVSS 2.0 · 2.1 Low EPSS 1.7% KEV · Not listed
Description
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2006-4024 MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Ubuntu USN Ubuntu USN USN-338-1 MySQL vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00227}

epss

{'score': 0.00235}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 6:57 PM
Reserved
Aug 9, 2006, 12:00 AM
Status
Modified
Published
Aug 9, 2006, 10:04 PM
Modified
Jun 16, 2026, 10:28 PM
Severity
Low
Public date
Nov 23, 2005, 12:00 AM