CVE-2006-0369: Infoleak
DISPUTED MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT FROM informationschema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-0369?
The severity of CVE-2006-0369 is considered low as it requires local access to a VIEW to exploit.
How do I fix CVE-2006-0369?
To fix CVE-2006-0369, upgrade MySQL to a version later than 5.0.18 that addresses this vulnerability.
Who is affected by CVE-2006-0369?
CVE-2006-0369 affects local users of MySQL 5.0.18 who have access to views.
What information can be obtained through CVE-2006-0369?
By exploiting CVE-2006-0369, users can obtain sensitive information about the query that created a view.
Is CVE-2006-0369 still a concern today?
CVE-2006-0369 is less of a concern today due to the availability of more secure versions of MySQL.