CVE-2007-2691

EPSS 1.04%
Published 16.05.2007 01:19:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.

Affected products Warnungen 0 Metrics 2 CWE 0 References 35

Data is provided by the National Vulnerability Database (NVD)

Mysql ≫ Mysql Version <= 4.1.22

Mysql ≫ Mysql Version >= 5.0 < 5.0.42

Mysql ≫ Mysql Version >= 5.1 < 5.1.18

Debian ≫ Debian Linux Version3.1

Debian ≫ Debian Linux Version4.0

Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts

Canonical ≫ Ubuntu Linux Version6.10

Canonical ≫ Ubuntu Linux Version7.04

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.04%	0.768

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.9	6.8	4.9	AV:N/AC:M/Au:S/C:N/I:P/A:P

http://secunia.com/advisories/30351

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0364.html

Third Party Advisory

http://secunia.com/advisories/31226

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0768.html

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

Third Party Advisory

http://secunia.com/advisories/28838

Third Party Advisory

http://secunia.com/advisories/25946

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:139

Third Party Advisory

http://secunia.com/advisories/27155

Third Party Advisory

http://secunia.com/advisories/27823

Third Party Advisory

http://www.debian.org/security/2007/dsa-1413

Third Party Advisory

https://usn.ubuntu.com/528-1/

Third Party Advisory

http://bugs.mysql.com/bug.php?id=27515

Vendor Advisory

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html

Patch

Vendor Advisory

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Third Party Advisory

Mailing List

http://lists.mysql.com/announce/470

Vendor Advisory

http://osvdb.org/34766

Broken Link

http://secunia.com/advisories/25301

Third Party Advisory

http://secunia.com/advisories/26073

Third Party Advisory

http://secunia.com/advisories/26430

Third Party Advisory

http://secunia.com/advisories/32222

Third Party Advisory

http://support.apple.com/kb/HT3216

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0894.html

Third Party Advisory

http://www.securityfocus.com/archive/1/473874/100/0/threaded

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/24016

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/31681

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id?1018069

Third Party Advisory

VDB Entry

http://www.vupen.com/english/advisories/2007/1804

Third Party Advisory

http://www.vupen.com/english/advisories/2008/2780

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/34347

Third Party Advisory

VDB Entry

https://issues.rpath.com/browse/RPL-1536

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2007-2691

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2691

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2691

EUVD