Skip to content
OpenAdvisories
Unscored RHSA-2008:0364 10 CVEs

Red Hat Security Advisory: mysql security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client mysql 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client mysql-debuginfo 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-bench 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-debuginfo 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-devel 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-server 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::client_workstation mysql-test 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-bench 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-debuginfo 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-devel 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-server 0:5.0.45-7.el5
Red Hat · RHEL 5 enterprise_linux:5::server mysql-test 0:5.0.45-7.el5

Vulnerabilities 10

  • Unscored —
    CVE-2006-0903 Public exploit

    MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL characte…

  • Unscored —
    CVE-2006-4031

    MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE …

  • Unscored —
    CVE-2006-4227 Public exploit EPSS 14%

    MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's…

  • Unscored —
    CVE-2006-7232

    sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial …

  • Unscored —
    CVE-2007-1420 Public exploit

    MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_sche…

  • Unscored —
    CVE-2007-2583 Public exploit EPSS 11%

    The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depe…

  • Unscored —
    CVE-2007-2691

    MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE …

  • Unscored —
    CVE-2007-2692

    The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privi…

  • Unscored —
    CVE-2007-3781

    MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE …

  • Unscored —
    CVE-2007-3782

    MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another…

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=194613
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=202246
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=216427
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=232603
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=240813
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=241688
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=241689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=248553
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=254012
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=256501
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=349121
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=434264
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=435391
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0364.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-0903
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-0903
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-0903
  • report
    https://access.redhat.com/security/cve/CVE-2006-4031
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4031
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4031
  • report
    https://access.redhat.com/security/cve/CVE-2006-4227
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-4227
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-4227
  • report
    https://access.redhat.com/security/cve/CVE-2006-7232
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-7232
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-7232
  • report
    https://access.redhat.com/security/cve/CVE-2007-1420
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1420
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1420
  • report
    https://access.redhat.com/security/cve/CVE-2007-2583
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2583
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2583
  • report
    https://access.redhat.com/security/cve/CVE-2007-2691
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2691
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2691
  • report
    https://access.redhat.com/security/cve/CVE-2007-2692
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2692
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2692