CVE-2006-1451
First published: Fri May 12 2006(Updated: )
MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the "New MySQL root password" that is provided, which causes the MySQL root password to be blank and allows local users to gain full privileges to that database.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and macOS | =10.4.6 | |
| Apple iOS and macOS | =10.3.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.apple.com/archives/security-announce/2006/May/msg00003.html
- http://www.us-cert.gov/cas/techalerts/TA06-132A.html
- http://securitytracker.com/id?1016077
- http://secunia.com/advisories/20077
- http://www.securityfocus.com/bid/17951
- http://www.osvdb.org/25595
- http://www.vupen.com/english/advisories/2006/1779
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26420
Frequently Asked Questions
What is the severity of CVE-2006-1451?
CVE-2006-1451 is considered a high severity vulnerability due to the potential for unauthorized local user access to the MySQL database.
How do I fix CVE-2006-1451?
To mitigate CVE-2006-1451, set a strong root password for MySQL after installing the database server.
Who is affected by CVE-2006-1451?
CVE-2006-1451 affects users of MySQL Manager on Apple Mac OS X versions 10.3.9 and 10.4.6.
What are the consequences of CVE-2006-1451?
Exploitation of CVE-2006-1451 can lead to full privileges for local users on the MySQL database due to a blank root password.
Is there a patch available for CVE-2006-1451?
There is no specific patch available, but users should manually set the MySQL root password to avoid the vulnerability.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/apple
- canonical/apple ios and macos
- version/apple ios and macos/10.4.6
- version/apple ios and macos/10.3.9