4.9

CVE-2007-2691

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mysql ≫ Mysql Version <= 4.1.22
Mysql ≫ Mysql Version >= 5.0 < 5.0.42
Mysql ≫ Mysql Version >= 5.1 < 5.1.18
Debian ≫ Debian Linux Version3.1
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version6.10
Canonical ≫ Ubuntu Linux Version7.04
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.04% 0.768
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 6.8 4.9
AV:N/AC:M/Au:S/C:N/I:P/A:P
https://usn.ubuntu.com/528-1/
Third Party Advisory
http://www.securityfocus.com/bid/24016
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/31681
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018069
Third Party Advisory
VDB Entry