Oracle MySQL 3.23.49

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

Published: 2012-05-03T22:00:00.000Z
Updated: 2024-08-06T19:08:38.184Z

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

Published: 2006-08-09T22:00:00.000Z
Updated: 2024-08-07T18:57:46.100Z

MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query.

Published: 2006-02-27T23:00:00.000Z
Updated: 2024-08-07T16:48:56.622Z

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.

Published: 2005-03-11T05:00:00.000Z
Updated: 2024-08-07T21:21:06.505Z

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.

Published: 2005-03-11T05:00:00.000Z
Updated: 2024-08-07T21:21:06.457Z