>> MySQL Database Creation Security Bypass and Privilege Escalation Vulnerabilities
Title : MySQL Database Creation Security Bypass and Privilege Escalation Vulnerabilities VUPEN ID : VUPEN/ADV-2006-3306 CVE ID : CVE-2006-4226 - CVE-2006-4227
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-08-17
Technical Description
Two vulnerabilities have been identified in MySQL, which could be exploited by malicious users to bypass security restrictions.
The first issue is due to an error when creating databases, which could be exploited by a malicious user who has access to a database (e.g. "test") to create arbitrary databases (e.g. "tEst") on case-sensitive filesystems even if he does not have the appropriate permissions.
The second flaw is due to an error where suid routine arguments are calculated in an incorrect security context, which could be exploited by a malicious user with "EXECUTE" privileges to execute arbitrary DML statements with the privileges of the routine's definer.
