The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade mysql-benchUpgrade mysql-serverUpgrade mysql-testUpgrade mysqlUpgrade mysql-devel | Oct 16, 2024 | May 16, 2007 |
| Suse | — | Upgrade mysql-debugUpgrade libmysqlclient-develUpgrade mysql-shared-32bitUpgrade libmysqlclient_r15-64bitUpgrade mysql-MaxUpgrade libmysqlclient15Upgrade mysqlUpgrade mysql-toolsUpgrade suse-releaseUpgrade libmysqlclient_r15-32bitUpgrade mysql-shared-64bitUpgrade mysql-sharedUpgrade mysql-benchUpgrade mysql-develUpgrade libmysqlclient_r15Upgrade mysql-clientUpgrade libmysqlclient15-64bitUpgrade libmysqlclient15-32bit | Feb 17, 2015 | May 15, 2007 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | May 16, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub