(RHSA-2007:0152) Moderate: mysql security update

2007-04-0300:00:00

access.redhat.com

3.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:P/I:P/A:N

0.003 Low

EPSS

Percentile

68.1%

JSON

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a
client/server implementation consisting of a server daemon (mysqld) and
many different client programs and libraries.

A flaw was found in the way MySQL handled case sensitive database names. A
user with the ability to create databases could gain unauthorized access to
other databases hosted by the MySQL server. (CVE-2006-4226)

This flaw does not affect the version of MySQL distributed with Red Hat
Enterprise Linux 2.1, 3, or 5.

All users of the MySQL server are advised to upgrade to these updated
packages, which contain a backported patch which fixes this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xmysql< 4.1.20-2.RHEL4.1mysql-4.1.20-2.RHEL4.1.s390x.rpm
RedHatanyx86_64mysql-server< 4.1.20-2.RHEL4.1mysql-server-4.1.20-2.RHEL4.1.x86_64.rpm
RedHatanyppcmysql-bench< 4.1.20-2.RHEL4.1mysql-bench-4.1.20-2.RHEL4.1.ppc.rpm
RedHatanys390mysql-bench< 4.1.20-2.RHEL4.1mysql-bench-4.1.20-2.RHEL4.1.s390.rpm
RedHatanyx86_64mysql-devel< 4.1.20-2.RHEL4.1mysql-devel-4.1.20-2.RHEL4.1.x86_64.rpm
RedHatanys390xmysql-server< 4.1.20-2.RHEL4.1mysql-server-4.1.20-2.RHEL4.1.s390x.rpm
RedHatanysrcmysql< 4.1.20-2.RHEL4.1mysql-4.1.20-2.RHEL4.1.src.rpm
RedHatanyi386mysql-devel< 4.1.20-2.RHEL4.1mysql-devel-4.1.20-2.RHEL4.1.i386.rpm
RedHatanys390mysql-server< 4.1.20-2.RHEL4.1mysql-server-4.1.20-2.RHEL4.1.s390.rpm
RedHatanyia64mysql-bench< 4.1.20-2.RHEL4.1mysql-bench-4.1.20-2.RHEL4.1.ia64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390x	mysql	< 4.1.20-2.RHEL4.1	mysql-4.1.20-2.RHEL4.1.s390x.rpm
RedHat	any	x86_64	mysql-server	< 4.1.20-2.RHEL4.1	mysql-server-4.1.20-2.RHEL4.1.x86_64.rpm
RedHat	any	ppc	mysql-bench	< 4.1.20-2.RHEL4.1	mysql-bench-4.1.20-2.RHEL4.1.ppc.rpm
RedHat	any	s390	mysql-bench	< 4.1.20-2.RHEL4.1	mysql-bench-4.1.20-2.RHEL4.1.s390.rpm
RedHat	any	x86_64	mysql-devel	< 4.1.20-2.RHEL4.1	mysql-devel-4.1.20-2.RHEL4.1.x86_64.rpm
RedHat	any	s390x	mysql-server	< 4.1.20-2.RHEL4.1	mysql-server-4.1.20-2.RHEL4.1.s390x.rpm
RedHat	any	src	mysql	< 4.1.20-2.RHEL4.1	mysql-4.1.20-2.RHEL4.1.src.rpm
RedHat	any	i386	mysql-devel	< 4.1.20-2.RHEL4.1	mysql-devel-4.1.20-2.RHEL4.1.i386.rpm
RedHat	any	s390	mysql-server	< 4.1.20-2.RHEL4.1	mysql-server-4.1.20-2.RHEL4.1.s390.rpm
RedHat	any	ia64	mysql-bench	< 4.1.20-2.RHEL4.1	mysql-bench-4.1.20-2.RHEL4.1.ia64.rpm