Lucene search

K
freebsdFreeBSDA9C51CAF-6603-11DB-AB90-000E35FD8194
HistoryMar 29, 2006 - 12:00 a.m.

mysql -- database suid privilege escalation

2006-03-2900:00:00
vuxml.freebsd.org
16

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.049 Low

EPSS

Percentile

92.8%

Dmitri Lenev reports a privilege escalation in
MySQL. MySQL evaluates arguments of suid routines in the
security context of the routine’s definer instead of the
routine’s caller, which allows remote and local
authenticated users to gain privileges through a routine
that has been made available using GRANT EXECUTE.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmysql-server= 5.1UNKNOWN
FreeBSDanynoarchmysql-server< 5.1.12UNKNOWN

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.049 Low

EPSS

Percentile

92.8%

Related for A9C51CAF-6603-11DB-AB90-000E35FD8194