Description
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/21259 ↗
- http://secunia.com/advisories/21627 ↗
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html ↗
- http://www.novell.com/linux/security/advisories/2006_23_sr.html ↗
- http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html ↗
- http://www.vupen.com/english/advisories/2006/3079 ↗
- http://www.securityfocus.com/bid/19279 ↗
- http://www.ubuntu.com/usn/usn-338-1 ↗
- http://secunia.com/advisories/31226 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10468 ↗
- http://docs.info.apple.com/article.html?artnum=305214 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0768.html ↗
- http://secunia.com/advisories/21382 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:149 ↗
- http://secunia.com/advisories/22080 ↗
- http://secunia.com/advisories/21770 ↗
- http://secunia.com/advisories/21685 ↗
- http://dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html ↗
- http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html ↗
- http://securitytracker.com/id?1016617 ↗
- http://bugs.mysql.com/bug.php?id=15195 ↗
- http://secunia.com/advisories/30351 ↗
- http://www.vupen.com/english/advisories/2007/0930 ↗
- http://www.redhat.com/support/errata/RHSA-2007-0083.html ↗
- https://issues.rpath.com/browse/RPL-568 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0364.html ↗
- http://secunia.com/advisories/24479 ↗