• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

MySQL MERGE Privilege Revoke Bypass Vulnerability

Solution:
The vendor released versions 4.1.21 and 5.0.24 (to be released) to address this issue.

Please see the references for more information.


Apple Mac OS X Server 10.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.1

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.3

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.5

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.7

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.8

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

MySQL AB MySQL 4.1.12

• Mandriva lib64mysql14-4.1.12-4.6.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva lib64mysql14-devel-4.1.12-4.6.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva libmysql14-4.1.12-4.6.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva libmysql14-devel-4.1.12-4.6.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-4.1.12-4.6.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-4.1.12-4.6.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-bench-4.1.12-4.6.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-bench-4.1.12-4.6.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-client-4.1.12-4.6.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-client-4.1.12-4.6.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-common-4.1.12-4.6.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-common-4.1.12-4.6.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-Max-4.1.12-4.6.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-Max-4.1.12-4.6.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-NDB-4.1.12-4.6.20060mdk.i586.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva MySQL-NDB-4.1.12-4.6.20060mdk.x86_64.rpm
  Mandriva Linux 2006.0:
  http://wwwnew.mandriva.com/en/downloads

MySQL AB MySQL 5.0.22

• Ubuntu libmysqlclient15-dev_5.0.22-0ubuntu6.06.2_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15-dev_5.0.22-0ubuntu6.06.2_amd64.deb


• Ubuntu libmysqlclient15-dev_5.0.22-0ubuntu6.06.2_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15-dev_5.0.22-0ubuntu6.06.2_i386.deb


• Ubuntu libmysqlclient15-dev_5.0.22-0ubuntu6.06.2_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15-dev_5.0.22-0ubuntu6.06.2_powerpc.deb


• Ubuntu libmysqlclient15-dev_5.0.22-0ubuntu6.06.2_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15-dev_5.0.22-0ubuntu6.06.2_sparc.deb


• Ubuntu libmysqlclient15off_5.0.22-0ubuntu6.06.2_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15off_5.0.22-0ubuntu6.06.2_amd64.deb


• Ubuntu libmysqlclient15off_5.0.22-0ubuntu6.06.2_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15off_5.0.22-0ubuntu6.06.2_i386.deb


• Ubuntu libmysqlclient15off_5.0.22-0ubuntu6.06.2_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15off_5.0.22-0ubuntu6.06.2_powerpc.deb


• Ubuntu libmysqlclient15off_5.0.22-0ubuntu6.06.2_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/libmysqlc lient15off_5.0.22-0ubuntu6.06.2_sparc.deb


• Ubuntu mysql-client-5.0_5.0.22-0ubuntu6.06.2_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent-5.0_5.0.22-0ubuntu6.06.2_amd64.deb


• Ubuntu mysql-client-5.0_5.0.22-0ubuntu6.06.2_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent-5.0_5.0.22-0ubuntu6.06.2_i386.deb


• Ubuntu mysql-client-5.0_5.0.22-0ubuntu6.06.2_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent-5.0_5.0.22-0ubuntu6.06.2_powerpc.deb


• Ubuntu mysql-client-5.0_5.0.22-0ubuntu6.06.2_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent-5.0_5.0.22-0ubuntu6.06.2_sparc.deb


• Ubuntu mysql-client_5.0.22-0ubuntu6.06.2_all.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-cli ent_5.0.22-0ubuntu6.06.2_all.deb


• Ubuntu mysql-common_5.0.22-0ubuntu6.06.2_all.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-com mon_5.0.22-0ubuntu6.06.2_all.deb


• Ubuntu mysql-server-5.0_5.0.22-0ubuntu6.06.2_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver-5.0_5.0.22-0ubuntu6.06.2_amd64.deb


• Ubuntu mysql-server-5.0_5.0.22-0ubuntu6.06.2_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver-5.0_5.0.22-0ubuntu6.06.2_i386.deb


• Ubuntu mysql-server-5.0_5.0.22-0ubuntu6.06.2_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver-5.0_5.0.22-0ubuntu6.06.2_powerpc.deb


• Ubuntu mysql-server-5.0_5.0.22-0ubuntu6.06.2_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver-5.0_5.0.22-0ubuntu6.06.2_sparc.deb


• Ubuntu mysql-server_5.0.22-0ubuntu6.06.2_all.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mysql-dfsg-5.0/mysql-ser ver_5.0.22-0ubuntu6.06.2_all.deb