CVE-2006-4031: MySQL

Low severity, CVSS 2.1. EPSS: 1.7% chance of exploitation in the next 30 days.

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

Affected products

• MySQL MySQL: version 4.1.0 only; version 4.1.2 only; version 4.1.3 only; version 4.1.8 only; version 4.1.10 only; version 4.1.12 only; …
• Oracle MySQL: version 3.22.27 only; version 3.22.28 only; version 3.22.29 only; version 3.22.30 only; version 3.22.32 only; version 3.23 only; …

Published 2006-08-09. Last modified 2026-06-16.