Description

MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.

Remediation

References

CVE-2006-4226

Related Vulnerabilities

WordPress Plugin Newsletter-Send awesome emails from WordPress Open Redirect (3.7.0)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-1099)

Internet Information Services Other Vulnerability (CVE-2000-0226)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-4791)

Drupal Core 5.x Multiple Vulnerabilities (5.0 - 5.21)

Severity

Low

Classification

CVE-2006-4226

Tags

Missing Update Known Vulnerabilities