MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.
CVSS Details
- CVSS 3.1 Base Score: 4.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysqlserver | — | Upgrade macOS to the latest version | Dec 16, 2011 | Aug 18, 2006 |
| Freebsd | — | Upgrade mysql-server | Dec 10, 2025 | Oct 29, 2006 |
| Suse | — | Upgrade mariadb-clientUpgrade mysql-MaxUpgrade mysqlUpgrade mariadb104-clientUpgrade libmariadbd104-develUpgrade libmysql55client18Upgrade libmysql55client_r18Upgrade mariadb104Upgrade mariadb104-errormessagesUpgrade mariadb104-rpm-macrosUpgrade python3-mysqlclientUpgrade libmariadbd19Upgrade libmysqlclient_r15-x86Upgrade mariadb104-benchUpgrade mariadb104-galeraUpgrade libmysqlclient15-32bitUpgrade mariadb104-testUpgrade mariadb104-toolsUpgrade libmysql55client18-32bitUpgrade libmysql55client_r18-32bitUpgrade mariadbUpgrade libmariadbd-develUpgrade libmysql55client_r18-x86Upgrade libmysqlclient_r15Upgrade libmysql55client18-x86Upgrade libmysqlclient_r15-32bitUpgrade mysql-toolsUpgrade libmariadb_pluginsUpgrade libmysqlclient-develUpgrade mariadb-toolsUpgrade libmariadb-develUpgrade mariadb-errormessagesUpgrade liblz4-1Upgrade libmariadb3Upgrade libmysqlclient15-x86Upgrade mariadb-benchUpgrade mysql-clientUpgrade libmysqlclient15 | Aug 9, 2024 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub