Description

MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.

Remediation

References

CVE-2006-4226

Related Vulnerabilities

TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-3583)

WordPress Plugin Widgets for WooCommerce Products on Elementor Security Bypass (1.0.5)

Oracle Application Server Other Vulnerability (CVE-2007-2121)

PHP Out-of-bounds Write Vulnerability (CVE-2021-21704)

PHP Integer Overflow or Wraparound Vulnerability (CVE-2015-8394)

Severity

Low

Classification

CVE-2006-4226

Tags

Missing Update Known Vulnerabilities