Every CVE Search/ Get API key

CVE-2006-4227

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security...

6.5 MediumPublic exploit

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

Exploit likelihood

13.6%Up 2.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

Record
CVE-2006-4227
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

Record
CVE-2006-4227
Updated
2026-11-02
EUVDEUVD-2006-4217 No score

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

Record
EUVD-2006-4217
Updated
2026-11-03
GitHub AdvisoriesGHSA-pq6p-m3qv-7m6j No score

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security...

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

Record
GHSA-pq6p-m3qv-7m6j
Weakness
CWE-20
Updated
2026-11-02
OSVSUSE-RU-2023:3956-1 No score

Recommended update for mariadb104

This update for mariadb104 fixes the following issues:

  • Implement version 10.4 of MariaDB (jsc#PED-2455):
    • It is possible to use more than one authentication plugin for each user account.
    • The root user account is being created with the ability to use two authentication plugins.
    • All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
    • Is being supported for User Password Expiry, which is not active by default.
    • Faster privilege checks for MariaDB setups with many user accounts or many database grants.
  • Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
  • MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
  • Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
  • Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
Record
SUSE-RU-2023:3956-1
Updated
2026-11-02
OSVSUSE-RU-2023:4991-1 No score

Recommended update for mariadb104

This update for mariadb104 fixes the following issues:

  • Implement version 10.4 of MariaDB (jsc#PED-2455):
    • It is possible to use more than one authentication plugin for each user account.
    • The root user account is being created with the ability to use two authentication plugins.
    • All user accounts, passwords, and global privileges are now stored in the mysql.global_priv table.
    • Is being supported for User Password Expiry, which is not active by default.
    • Faster privilege checks for MariaDB setups with many user accounts or many database grants.
  • Update mysql-systemd-helper to be aware of custom group (bsc#1200105)
  • MariaDB is now support lz4 compression for 'INNODB'. (bsc#1186031)
  • Add 'mysql-user.conf' file to enable systemd generating mysql user in containers. (bsc#1173028)
  • Fixes an issue when MariaDB is ignoring the value of the parameter 'open_files_limit' in the global variables. (bsc#1180014)
Record
SUSE-RU-2023:4991-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
mysql
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-bench
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-debuginfo
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-devel
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-server
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql-test
Red Hat:rhel_application_stack:1
From an advisory covering 5 CVEs
before 0:5.0.30-1.el4s1.1
0:5.0.30-1.el4s1.1
mysql
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-bench
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-debuginfo
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-devel
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
Show 28 moreShow less
Affected packages
PackageAffectedFixed
mysql-server
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-test
Red Hat:enterprise_linux:5::client_workstation
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-debuginfo
Red Hat:enterprise_linux:5::client
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-bench
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-server
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mysql-test
Red Hat:enterprise_linux:5::server
From an advisory covering 10 CVEs
before 0:5.0.45-7.el5
0:5.0.45-7.el5
mariadb104
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 221 CVEs
before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 221 CVEs
before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
mariadb104
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 221 CVEs
before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 221 CVEs
before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
mariadb104
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 221 CVEs
before 10.4.30-150100.3.5.10
10.4.30-150100.3.5.10
python-mysqlclient
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 221 CVEs
before 1.4.6-150100.3.3.7
1.4.6-150100.3.3.7
lz4
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 221 CVEs
before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 221 CVEs
before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 221 CVEs
before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 221 CVEs
before 1.3.14-8.9.2
1.3.14-8.9.2
lz4
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 221 CVEs
before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 221 CVEs
before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 221 CVEs
before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 221 CVEs
before 1.3.14-8.9.2
1.3.14-8.9.2
lz4
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 221 CVEs
before 1.8.0-3.5.2
1.8.0-3.5.2
mariadb-connector-c
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 221 CVEs
before 3.1.22-2.35.1
3.1.22-2.35.1
mariadb104
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 221 CVEs
before 10.4.30-8.5.46
10.4.30-8.5.46
python-mysqlclient
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 221 CVEs
before 1.3.14-8.9.2
1.3.14-8.9.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBMySQL 4/5 - SUID Routine Miscalculation Arbitrary DML Statement Execution2006-08-17

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-4227 is a medium vulnerability (CVSS 6.5) in Mysql, published August 18, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.6%, the 96th percentile. No source names a fixed version.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 294 references. The JSON record has them.

MoveEnter Open