Description

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

Remediation

References

CVE-2006-4227

Related Vulnerabilities

PostgreSQL Cleartext Storage in a File or on Disk Vulnerability (CVE-2026-14663)

Apache HTTP Server URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-1927)

Serendipity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4090)

Plone CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2016-7135)

WordPress Plugin Thrive Ultimatum Security Bypass (2.3.9.3)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2006-4227