Description (CNA)
MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://osvdb.org/43179
- http://www.vupen.com/english/advisories/2008/0560/references
- http://bugs.mysql.com/31611
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html
- http://www.securitytracker.com/id?1019083
ADP enrichment
No English description supplied.