CVE-2006-1451: High severity Apple iOS and macOS vulnerability

Published May 12, 2006

Updated

MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the "New MySQL root password" that is provided, which causes the MySQL root password to be blank and allows local users to gain full privileges to that database.

Affected Software

2 affected components

Apple iOS and macOS=10.4.6

Apple iOS and macOS=10.3.9

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Event History

May 12, 2006

CVE Published

09:02 PM

May 13, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1451?

CVE-2006-1451 is considered a high severity vulnerability due to the potential for unauthorized local user access to the MySQL database.

How do I fix CVE-2006-1451?

To mitigate CVE-2006-1451, set a strong root password for MySQL after installing the database server.

Who is affected by CVE-2006-1451?

CVE-2006-1451 affects users of MySQL Manager on Apple Mac OS X versions 10.3.9 and 10.4.6.

What are the consequences of CVE-2006-1451?

Exploitation of CVE-2006-1451 can lead to full privileges for local users on the MySQL database due to a blank root password.

Is there a patch available for CVE-2006-1451?

There is no specific patch available, but users should manually set the MySQL root password to avoid the vulnerability.