From 04ee71b7ac5b966c1e3a74811e92bebe3e84adfe Mon Sep 17 00:00:00 2001 From: "Simon L. B. Nielsen" Date: Sun, 29 Oct 2006 13:50:01 +0000 Subject: [PATCH] Document two MySQL privilege escalations. PR: ports/104890 Submitted by: Henrik Brix Andersen Approved by: portmgr (secteam blanket) --- security/vuxml/vuln.xml | 60 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 60 insertions(+) diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index c080df1c845d..2455c6fdae62 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,66 @@ Note: Please add new entries to the beginning of this file. --> + + mysql -- database suid privilege escalation + + + mysql-server + 5.15.1.12 + 5.05.0.25 + + + + +

Dmitri Lenev reports reports a privilege escalation in + MySQL. MySQL evaluates arguments of suid routines in the + security context of the routine's definer instead of the + routine's caller, which allows remote and local + authenticated users to gain privileges through a routine + that has been made available using GRANT EXECUTE.

+ + + + CVE-2006-4227 + http://bugs.mysql.com/bug.php?id=18630 + + + 2006-03-29 + 2006-10-29 + + + + + mysql -- database "case-sensitive" privilege escalation + + + mysql-server + 5.15.1.12 + 5.05.0.25 + 4.1.21 + + + + +

Michal Prokopiuk reports a privilege escalation in MySQL. + The vulnerability causes MySQL, when run on case-sensitive + filesystems, to allow remote and local authenticated users + to create or access a database when the database name + differs only in case from a database for which they have + permissions.

+ + + + 19559 + CVE-2006-4226 + http://bugs.mysql.com/bug.php?id=17647 + + + 2006-08-09 + 2006-10-29 + + + Serendipity -- XSS Vulnerabilities