MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 18, 2013 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Dec 10, 2007 |
| Suse | — | Upgrade mariadb104-benchUpgrade mysqlUpgrade libmysql55client18-32bitUpgrade libmariadbd19Upgrade libmysqlclient-develUpgrade libmysql55client18-x86Upgrade python3-mysqlclientUpgrade libmysqlclient15Upgrade mariadb-toolsUpgrade mariadb104-toolsUpgrade libmariadb-develUpgrade libmysqlclient_r15-x86Upgrade liblz4-1Upgrade mariadb104Upgrade mariadb104-errormessagesUpgrade mariadb-errormessagesUpgrade libmysql55client_r18Upgrade libmysqlclient15-32bitUpgrade libmysql55client_r18-32bitUpgrade mariadb104-testUpgrade mariadb-benchUpgrade mariadb104-galeraUpgrade libmysql55client_r18-x86Upgrade mariadb104-clientUpgrade libmariadb_pluginsUpgrade libmysqlclient15-x86Upgrade mysql-clientUpgrade mysql-toolsUpgrade libmysql55client18Upgrade libmariadb3Upgrade mysql-MaxUpgrade libmariadbd104-develUpgrade mariadb-clientUpgrade libmysqlclient_r15-32bitUpgrade libmariadbd-develUpgrade mariadbUpgrade libmysqlclient_r15Upgrade mariadb104-rpm-macros | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.0 | Nov 8, 2024 | Dec 10, 2007 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub