exploits , vulnerabilities , articles , MySQL MyISAM Table Privileges Secuity Bypass Vulnerability

Title	MySQL MyISAM Table Privileges Secuity Bypass Vulnerability
Published	2008-05-08-12:00AM
Updated	2008-05-09-12:25AM
Class	Access Validation Error
CVE
Remote	Yes
Local	No
Credit	Sergei Golubchik
Vulnerable	MySQL AB MySQL 5.0.52 MySQL AB MySQL 5.0.51 MySQL AB MySQL 5.0.50 MySQL AB MySQL 5.0.49 MySQL AB MySQL 5.0.48 MySQL AB MySQL 5.0.47 MySQL AB MySQL 5.0.46 MySQL AB MySQL 5.0.45 MySQL AB MySQL 5.0.44 MySQL AB MySQL 5.0.42 MySQL AB MySQL 5.0.40 MySQL AB MySQL 5.0.39 MySQL AB MySQL 5.0.38 MySQL AB MySQL 5.0.37 MySQL AB MySQL 5.0.36 MySQL AB MySQL 5.0.33 MySQL AB MySQL 5.0.32 MySQL AB MySQL 5.0.27 MySQL AB MySQL 5.0.24 MySQL AB MySQL 5.0.22 10.1 MySQL AB MySQL 5.0.22 MySQL AB MySQL 5.0.21 MySQL AB MySQL 5.0.20 MySQL AB MySQL 5.0.19 MySQL AB MySQL 5.0.18 MySQL AB MySQL 5.0.4 MySQL AB MySQL 5.0.3 MySQL AB MySQL 5.0.2 MySQL AB MySQL 5.0.1 MySQL AB MySQL 5.0 .0alpha MySQL AB MySQL 5.0 .00 MySQL AB MySQL 4.1.23 MySQL AB MySQL 4.1.21 MySQL AB MySQL 4.1.20 MySQL AB MySQL 4.1.19 MySQL AB MySQL 4.1.18 MySQL AB MySQL 4.1.16 MySQL AB MySQL 4.1.15 MySQL AB MySQL 4.1.13 MySQL AB MySQL 4.1.12 MySQL AB MySQL 4.1.11 MySQL AB MySQL 4.1.7 MySQL AB MySQL 4.1.5 MySQL AB MySQL 4.1.4 MySQL AB MySQL 4.1.3 beta MySQL AB MySQL 4.1.3 beta MySQL AB MySQL 4.1.3 0 MySQL AB MySQL 4.1.2 alpha MySQL AB MySQL 4.1.2 MySQL AB MySQL 4.1.1 MySQL AB MySQL 4.1 .11 MySQL AB MySQL 4.0.27 MySQL AB MySQL 4.0.26 MySQL AB MySQL 4.0.25 MySQL AB MySQL 4.0.24 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia64 Debian Linux 3.1 ia32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 MySQL AB MySQL 4.0.23 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 MySQL AB MySQL 4.0.21 MySQL AB MySQL 4.0.20 MandrakeSoft Linux Mandrake 10.1 x86_64 MandrakeSoft Linux Mandrake 10.1 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 MySQL AB MySQL 4.0.19 MySQL AB MySQL 4.0.18 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Linux Mandrake 10.0 AMD64 MandrakeSoft Linux Mandrake 10.0 MySQL AB MySQL 4.0.17 MySQL AB MySQL 4.0.15 Conectiva Linux 10.0 MandrakeSoft Linux Mandrake 9.2 amd64 MandrakeSoft Linux Mandrake 9.2 OpenPKG OpenPKG Current MySQL AB MySQL 4.0.14 OpenPKG OpenPKG 1.3 OpenPKG OpenPKG Current Trustix Secure Linux 2.0 MySQL AB MySQL 4.0.13 MySQL AB MySQL 4.0.12 MySQL AB MySQL 4.0.11 gamma MySQL AB MySQL 4.0.11 MandrakeSoft Linux Mandrake 9.1 ppc MandrakeSoft Linux Mandrake 9.1 MySQL AB MySQL 4.0.10 MySQL AB MySQL 4.0.9 gamma MySQL AB MySQL 4.0.9 MySQL AB MySQL 4.0.8 gamma MySQL AB MySQL 4.0.8 MySQL AB MySQL 4.0.7 gamma MySQL AB MySQL 4.0.7 MySQL AB MySQL 4.0.6 MySQL AB MySQL 4.0.5 a MySQL AB MySQL 4.0.5 MySQL AB MySQL 4.0.4 MySQL AB MySQL 4.0.3 MySQL AB MySQL 4.0.2 MySQL AB MySQL 4.0.1 MySQL AB MySQL 5.0 MySQL AB MySQL 4.1.11a MySQL AB MySQL 4.1.10a MySQL AB MySQL 4.1.0.0alpha MySQL AB MySQL 4.1.00
Not Vulnerable	MySQL AB MySQL 5.0.60 MySQL AB MySQL 4.1.24
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-07 FFmpeg TCP/UDP Memory Leak Denial Of ServiceVulnerability
2009-12-04 Achievo Document Types Section Arbitrary File Upload Vulnerability
2009-12-04 Achievo Scheduler Category HTML Injection Vulnerability
2009-12-04 Yoast Google Analytics for WordPress Plugin 404 Error Page Cross Site Scripting Vulnerability
2009-12-04 DevIL DICOM File Handling Remote Buffer Overflow Vulnerability
2009-12-04 Invision Power Board Local File Include and SQL Injection Vulnerabilities
2009-12-04 Mozilla Firefox Yoono Extension DOM Event Handler Cross Domain Scripting Vulnerability
2009-12-04 UBB.threads Multiple File Include Vulnerabilities
2009-12-04 Expat Unspecified XML Parsing Remote Denial of Service Vulnerability
2009-12-04 Apple Mac OS X Java Applet Certificate Validation Security Bypass Vulnerability