CVE-2006-4227

Publication date 18 August 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine’s definer instead of the routine’s caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mysql-dfsg-5.0 7.04 feisty
Fixed 5.0.38-0ubuntu1
6.10 edgy
Fixed 5.0.24a-9ubuntu0.1
6.06 LTS dapper
Fixed 5.0.22-0ubuntu6.06.3

References

Related Ubuntu Security Notices (USN)

    • USN-338-1
    • MySQL vulnerabilities
    • 5 September 2006

Other references