CVE-2006-4031
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a...
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Exploit likelihood
What each source reports
NVD Score used
2.1
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
- Record
CVE-2006-4031- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
- Record
CVE-2006-4031- Updated
- 2026-11-02
EUVDEUVD-2006-4024 No score
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
- Record
EUVD-2006-4024- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qqjv-c795-8pr6 No score
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a...
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
- Record
GHSA-qqjv-c795-8pr6- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.30-1.el4s1.1 | 0:5.0.30-1.el4s1.1 |
mysql-benchRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.30-1.el4s1.1 | 0:5.0.30-1.el4s1.1 |
mysql-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.30-1.el4s1.1 | 0:5.0.30-1.el4s1.1 |
mysql-develRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.30-1.el4s1.1 | 0:5.0.30-1.el4s1.1 |
mysql-serverRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.30-1.el4s1.1 | 0:5.0.30-1.el4s1.1 |
mysql-testRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.30-1.el4s1.1 | 0:5.0.30-1.el4s1.1 |
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
Show 30 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysqlRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-benchRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-serverRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-benchRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysqlRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-benchRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-serverRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-benchRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
mysql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4 | 0:4.1.22-2.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4031 is a low vulnerability (CVSS 2.1) in Mysql, published August 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. No source names a fixed version.
References
secunia.com/advisories/21259
secunia.com/advisories/21627
us-cert.gov/cas/techalerts/TA07-072A.html
novell.com/linux/security/advisories/2006_23_sr.html
lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
vupen.com/english/advisories/2006/3079
Show 92 moreShow less
securityfocus.com/bid/19279
ubuntu.com/usn/usn-338-1
secunia.com/advisories/31226
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10468
docs.info.apple.com/article.html?artnum=305214
redhat.com/support/errata/RHSA-2008-0768.html
secunia.com/advisories/21382
mandriva.com/security/advisories?name=MDKSA-2006:149
secunia.com/advisories/22080
secunia.com/advisories/21770
secunia.com/advisories/21685
dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html
dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html
securitytracker.com/id?1016617
bugs.mysql.com/bug.php?id=15195
secunia.com/advisories/30351
vupen.com/english/advisories/2007/0930
redhat.com/support/errata/RHSA-2007-0083.html
issues.rpath.com/browse/RPL-568
redhat.com/support/errata/RHSA-2008-0364.html
secunia.com/advisories/24479
nvd.nist.gov/vuln/detail/CVE-2006-4031
github.com/advisories/GHSA-qqjv-c795-8pr6
access.redhat.com/errata/RHSA-2007:0083
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=228999
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0083.json
access.redhat.com/security/cve/CVE-2006-0903
bugzilla.redhat.com/show_bug.cgi?id=194613
cve.org/CVERecord?id=CVE-2006-0903
nvd.nist.gov/vuln/detail/CVE-2006-0903
access.redhat.com/security/cve/CVE-2006-3081
bugzilla.redhat.com/show_bug.cgi?id=1618132
cve.org/CVERecord?id=CVE-2006-3081
nvd.nist.gov/vuln/detail/CVE-2006-3081
access.redhat.com/security/cve/CVE-2006-4031
bugzilla.redhat.com/show_bug.cgi?id=202246
cve.org/CVERecord?id=CVE-2006-4031
access.redhat.com/security/cve/CVE-2006-4226
bugzilla.redhat.com/show_bug.cgi?id=203428
cve.org/CVERecord?id=CVE-2006-4226
nvd.nist.gov/vuln/detail/CVE-2006-4226
access.redhat.com/security/cve/CVE-2006-4227
bugzilla.redhat.com/show_bug.cgi?id=216427
cve.org/CVERecord?id=CVE-2006-4227
nvd.nist.gov/vuln/detail/CVE-2006-4227
access.redhat.com/errata/RHSA-2008:0364
bugzilla.redhat.com/show_bug.cgi?id=232603
bugzilla.redhat.com/show_bug.cgi?id=240813
bugzilla.redhat.com/show_bug.cgi?id=241688
bugzilla.redhat.com/show_bug.cgi?id=241689
bugzilla.redhat.com/show_bug.cgi?id=248553
bugzilla.redhat.com/show_bug.cgi?id=254012
bugzilla.redhat.com/show_bug.cgi?id=256501
bugzilla.redhat.com/show_bug.cgi?id=349121
bugzilla.redhat.com/show_bug.cgi?id=434264
bugzilla.redhat.com/show_bug.cgi?id=435391
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0364.json
access.redhat.com/security/cve/CVE-2006-7232
cve.org/CVERecord?id=CVE-2006-7232
nvd.nist.gov/vuln/detail/CVE-2006-7232
access.redhat.com/security/cve/CVE-2007-1420
cve.org/CVERecord?id=CVE-2007-1420
nvd.nist.gov/vuln/detail/CVE-2007-1420
access.redhat.com/security/cve/CVE-2007-2583
cve.org/CVERecord?id=CVE-2007-2583
nvd.nist.gov/vuln/detail/CVE-2007-2583
access.redhat.com/security/cve/CVE-2007-2691
cve.org/CVERecord?id=CVE-2007-2691
nvd.nist.gov/vuln/detail/CVE-2007-2691
access.redhat.com/security/cve/CVE-2007-2692
cve.org/CVERecord?id=CVE-2007-2692
nvd.nist.gov/vuln/detail/CVE-2007-2692
access.redhat.com/security/cve/CVE-2007-3781
cve.org/CVERecord?id=CVE-2007-3781
nvd.nist.gov/vuln/detail/CVE-2007-3781
access.redhat.com/security/cve/CVE-2007-3782
cve.org/CVERecord?id=CVE-2007-3782
nvd.nist.gov/vuln/detail/CVE-2007-3782
access.redhat.com/errata/RHSA-2008:0768
bugzilla.redhat.com/show_bug.cgi?id=201904
bugzilla.redhat.com/show_bug.cgi?id=201988
bugzilla.redhat.com/show_bug.cgi?id=221085
bugzilla.redhat.com/show_bug.cgi?id=233771
bugzilla.redhat.com/show_bug.cgi?id=445222
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0768.json
access.redhat.com/security/cve/CVE-2006-3469
cve.org/CVERecord?id=CVE-2006-3469
nvd.nist.gov/vuln/detail/CVE-2006-3469
access.redhat.com/security/cve/CVE-2008-2079
cve.org/CVERecord?id=CVE-2008-2079
nvd.nist.gov/vuln/detail/CVE-2008-2079