CVE-2006-4031

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-08-09 · updated 2026-06-16

Description

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

Affected products

Mysql: 4.1.0, 4.1.2, 4.1.3, 4.1.8, 4.1.10, 4.1.12 (+15)
MySQL Server: 3.22.27, 3.22.28, 3.22.29, 3.22.30, 3.22.32, 3.23 (+124)

References

http://bugs.mysql.com/bug.php?id=15195
http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html
http://docs.info.apple.com/article.html?artnum=305214
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
http://secunia.com/advisories/21259
http://secunia.com/advisories/21382
http://secunia.com/advisories/21627
http://secunia.com/advisories/21685
http://secunia.com/advisories/21770
http://secunia.com/advisories/22080
http://secunia.com/advisories/24479

Get alerted when CVE-2006-4031 or the next vulnerability affects your stack