CVE-2006-4226

2006-08-1820:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

mysql

database

security

cve-2006-4226

filesystems

permissions

nvd

5.9 Medium

AI Score

Confidence

Low

3.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:P/A:N

0.005 Low

EPSS

Percentile

75.7%

JSON

MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.

CPENameOperatorVersion
mysql:mysqlmysqleq5.0.5
mysql:mysqlmysqleq5.0.10
mysql:mysqlmysqleq5.0.0
mysql:mysqlmysqleq5.0.15
mysql:mysqlmysqleq5.0.17
mysql:mysqlmysqleq4.1.13
mysql:mysqlmysqleq5.0.5.0.21
mysql:mysqlmysqleq5.0.3
mysql:mysqlmysqleq4.1.15
mysql:mysqlmysqleq4.1.8

CPE	Name	Operator	Version
mysql:mysql	mysql	eq	5.0.5
mysql:mysql	mysql	eq	5.0.10
mysql:mysql	mysql	eq	5.0.0
mysql:mysql	mysql	eq	5.0.15
mysql:mysql	mysql	eq	5.0.17
mysql:mysql	mysql	eq	4.1.13
mysql:mysql	mysql	eq	5.0.5.0.21
mysql:mysql	mysql	eq	5.0.3
mysql:mysql	mysql	eq	4.1.15
mysql:mysql	mysql	eq	4.1.8