CVE-2006-4227
MySQL - Privilege Escalation via SUID Routine Argument Evaluation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4227. PoCs published by Michal Prokopiuk.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation and security bypass vulnerability in MySQL 5.0.24 and prior. It leverages SUID routines to execute functions in a higher privilege context, allowing unauthorized access to restricted databases.
Description
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.
Exploits (1)
This exploit demonstrates a privilege escalation and security bypass vulnerability in MySQL 5.0.24 and prior. It leverages SUID routines to execute functions in a higher privilege context, allowing unauthorized access to restricted databases.