4.9

CVE-2007-2691

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mysql ≫ Mysql Version <= 4.1.22
Mysql ≫ Mysql Version >= 5.0 < 5.0.42
Mysql ≫ Mysql Version >= 5.1 < 5.1.18
Debian ≫ Debian Linux Version3.1
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version6.10
Canonical ≫ Ubuntu Linux Version7.04
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.85% 0.849
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 6.8 4.9
AV:N/AC:M/Au:S/C:N/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/30351
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0364.html
Third Party Advisory
http://secunia.com/advisories/31226
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0768.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
Third Party Advisory
http://secunia.com/advisories/28838
Third Party Advisory
http://secunia.com/advisories/25946
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:139
Third Party Advisory
http://secunia.com/advisories/27155
Third Party Advisory
http://secunia.com/advisories/27823
Third Party Advisory
http://www.debian.org/security/2007/dsa-1413
Third Party Advisory
https://usn.ubuntu.com/528-1/
Third Party Advisory
http://bugs.mysql.com/bug.php?id=27515
Vendor Advisory
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html
Patch
Vendor Advisory
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
Third Party Advisory
Mailing List
http://lists.mysql.com/announce/470
Vendor Advisory
http://osvdb.org/34766
Broken Link
http://secunia.com/advisories/25301
Third Party Advisory
http://secunia.com/advisories/26073
Third Party Advisory
http://secunia.com/advisories/26430
Third Party Advisory
http://secunia.com/advisories/32222
Third Party Advisory
http://support.apple.com/kb/HT3216
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0894.html
Third Party Advisory
http://www.securityfocus.com/archive/1/473874/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/24016
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/31681
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018069
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1804
Third Party Advisory
http://www.vupen.com/english/advisories/2008/2780
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/34347
Third Party Advisory
VDB Entry
https://issues.rpath.com/browse/RPL-1536
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559
Third Party Advisory