CVE-2006-4227

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-06-20T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-10-10T00:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "mysql-grant-execute-privilege-escalation(28442)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"name": "ADV-2006-3306", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"name": "SUSE-SR:2006:023", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"name": "oval:org.mitre.oval:def:10105", "tags": ["vdb-entry", "signature", "x_refsource_OVAL"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}, {"name": "USN-338-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU"], "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"name": "21506", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21506"}, {"name": "19559", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/19559"}, {"name": "22080", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/22080"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"name": "21770", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21770"}, {"name": "30351", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/30351"}, {"name": "1016709", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016709"}, {"name": "RHSA-2007:0083", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"name": "RHSA-2008:0364", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"name": "[commits] 20060620 bk commit into 5.0 tree (kroki:1.2168) BUG#18630", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.mysql.com/commits/7918"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-4227", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "mysql-grant-execute-privilege-escalation(28442)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"name": "ADV-2006-3306", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"name": "SUSE-SR:2006:023", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"name": "oval:org.mitre.oval:def:10105", "refsource": "OVAL", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}, {"name": "USN-338-1", "refsource": "UBUNTU", "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"name": "21506", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21506"}, {"name": "19559", "refsource": "BID", "url": "http://www.securityfocus.com/bid/19559"}, {"name": "22080", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/22080"}, {"name": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html", "refsource": "CONFIRM", "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"name": "21770", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21770"}, {"name": "30351", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/30351"}, {"name": "1016709", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016709"}, {"name": "RHSA-2007:0083", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"name": "RHSA-2008:0364", "refsource": "REDHAT", "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"name": "http://bugs.mysql.com/bug.php?id=18630", "refsource": "CONFIRM", "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"name": "[commits] 20060620 bk commit into 5.0 tree (kroki:1.2168) BUG#18630", "refsource": "MLIST", "url": "http://lists.mysql.com/commits/7918"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:57:46.439Z"}, "title": "CVE Program Container", "references": [{"name": "mysql-grant-execute-privilege-escalation(28442)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"name": "ADV-2006-3306", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"name": "SUSE-SR:2006:023", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"name": "oval:org.mitre.oval:def:10105", "tags": ["vdb-entry", "signature", "x_refsource_OVAL", "x_transferred"], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}, {"name": "USN-338-1", "tags": ["vendor-advisory", "x_refsource_UBUNTU", "x_transferred"], "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"name": "21506", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21506"}, {"name": "19559", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/19559"}, {"name": "22080", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/22080"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"name": "21770", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21770"}, {"name": "30351", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/30351"}, {"name": "1016709", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016709"}, {"name": "RHSA-2007:0083", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"name": "RHSA-2008:0364", "tags": ["vendor-advisory", "x_refsource_REDHAT", "x_transferred"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"name": "[commits] 20060620 bk commit into 5.0 tree (kroki:1.2168) BUG#18630", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.mysql.com/commits/7918"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-4227", "datePublished": "2006-08-18T19:55:00.000Z", "dateReserved": "2006-08-18T00:00:00.000Z", "dateUpdated": "2024-08-07T18:57:46.439Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "B77A2761-2B44-4061-9C29-A54F90A1AD83", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "5B3AD851-056F-4E57-B85B-4AC5A5A20C0C", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "FD24EA8C-4FCA-4F40-B2EA-7DFA49432483", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "754B78F2-A03C-40BE-812B-F5E57B93D20B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*", "matchCriteriaId": "665E063D-355D-4A5A-A05F-36BF582DE36F", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "214E3CF9-6362-4F5A-91B7-5E69564F7144", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*", "matchCriteriaId": "F4C6CD84-EA5D-451F-AFC3-5F7094F0017D", "vulnerable": true}, {"criteria": "cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "35BED939-3366-4CBF-B6BF-29C0C42E97F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*", "matchCriteriaId": "19001041-22C4-4D2C-A918-378DACBB1DF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "88FEEE64-899F-4F55-B829-641706E29E32", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*", "matchCriteriaId": "5EB2323C-EFE2-407A-9AE9-8717FA9F8625", "vulnerable": true}, {"criteria": "cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*", "matchCriteriaId": "6341F695-6034-4CC1-9485-ACD3A0E1A079", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."}, {"lang": "es", "value": "MySQL anterior a 5.0.25 y 5.1 anterior a 5.1.12 eval\u00faa los argumentos de rutinas suid en el contexto de seguridad del creador de la rutina en lugar del de aquel que llama a la rutina, lo que permite a usuarios autenticados remotamente escalar privilegios a trav\u00e9s de una rutina que ha sido puesta a su disposici\u00f3n utilizando GRANT EXECUTE."}], "id": "CVE-2006-4227", "lastModified": "2026-06-16T22:28:40.387", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-08-18T20:04:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"source": "cve@mitre.org", "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"source": "cve@mitre.org", "url": "http://lists.mysql.com/commits/7918"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21506"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21770"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22080"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/30351"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016709"}, {"source": "cve@mitre.org", "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/19559"}, {"source": "cve@mitre.org", "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"source": "cve@mitre.org", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://bugs.mysql.com/bug.php?id=18630"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.mysql.com/commits/7918"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21506"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/21770"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/22080"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/30351"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016709"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.novell.com/linux/security/advisories/2006_23_sr.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2007-0083.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/19559"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.ubuntu.com/usn/usn-338-1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/3306"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28442"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105"}], "sourceIdentifier": "cve@mitre.org", "vendorComments": [{"comment": "This issue did not affect the versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n\nIssue was addressed in MySQL packages as shipped in Red Hat Enterprise Linux 5 via:\n\nhttps://rhn.redhat.com/errata/RHSA-2008-0364.html", "lastModified": "2008-07-25T00:00:00", "organization": "Red Hat"}], "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"affected_release": [{"advisory": "RHSA-2008:0364", "cpe": "cpe:/o:redhat:enterprise_linux:5", "package": "mysql-0:5.0.45-7.el5", "product_name": "Red Hat Enterprise Linux 5", "release_date": "2008-05-20T00:00:00Z"}, {"advisory": "RHSA-2007:0083", "cpe": "cpe:/a:redhat:rhel_application_stack:1", "package": "mysql-0:5.0.30-1.el4s1.1", "product_name": "Red Hat Web Application Stack for RHEL 4", "release_date": "2007-02-19T00:00:00Z"}], "bugzilla": {"description": "mysql improper suid argument evaluation", "id": "216427", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=216427"}, "csaw": false, "details": ["MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE."], "name": "CVE-2006-4227", "public_date": "2006-03-29T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2006-4227\nhttps://nvd.nist.gov/vuln/detail/CVE-2006-4227"], "statement": "This issue did not affect the versions of MySQL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.", "threat_severity": "Moderate"}

{}