MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade mysql-server | Dec 10, 2025 | Oct 29, 2006 |
| Oracle_linux | — | Upgrade mysql-benchUpgrade mysql-serverUpgrade mysql-testUpgrade mysql-develUpgrade mysql | Oct 16, 2024 | Aug 18, 2006 |
| Suse | — | Upgrade mariadb-toolsUpgrade libmysqlclient_r15-32bitUpgrade python3-mysqlclientUpgrade mariadb104Upgrade mysql-toolsUpgrade libmysqlclient15-x86Upgrade libmariadb-develUpgrade libmysql55client_r18Upgrade mariadb104-clientUpgrade libmysqlclient_r15-x86Upgrade mariadb104-errormessagesUpgrade mariadb104-testUpgrade liblz4-1Upgrade libmariadb_pluginsUpgrade libmariadbd19Upgrade libmysqlclient15Upgrade libmysqlclient15-32bitUpgrade mariadb-errormessagesUpgrade mysql-clientUpgrade mysqlUpgrade libmariadbd-develUpgrade mariadb-clientUpgrade libmysql55client18Upgrade libmariadbd104-develUpgrade libmysql55client18-x86Upgrade mariadbUpgrade libmysql55client_r18-x86Upgrade mysql-MaxUpgrade mariadb104-galeraUpgrade libmariadb3Upgrade libmysql55client_r18-32bitUpgrade mariadb104-benchUpgrade mariadb104-rpm-macrosUpgrade libmysql55client18-32bitUpgrade libmysqlclient-develUpgrade libmysqlclient_r15Upgrade mariadb-benchUpgrade mariadb104-tools | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | Aug 18, 2006 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub