CVE-2006-4226: MySQL

Low severity, CVSS 3.6. EPSS: 3.1% chance of exploitation in the next 30 days.

MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.

Affected products

• MySQL MySQL: version 4.1.0 only; version 4.1.2 only; version 4.1.3 only; version 4.1.8 only; version 4.1.10 only; version 4.1.12 only; …
• Oracle MySQL: version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2006-08-18. Last modified 2026-06-16.