Lucene search

K
cveMitreCVE-2007-2693
HistoryMay 16, 2007 - 1:19 a.m.

CVE-2007-2693

2007-05-1601:19:00
mitre
web.nvd.nist.gov
38
mysql
vulnerability
remote access
alter table
sensitive information

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.002

Percentile

59.8%

MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.

Affected configurations

Nvd
Node
mysqlmysqlMatch5.1.5
OR
oraclemysqlMatch5.1.6
OR
oraclemysqlMatch5.1.9
OR
oraclemysqlMatch5.1.10
OR
oraclemysqlMatch5.1.11
OR
oraclemysqlMatch5.1.12
OR
oraclemysqlMatch5.1.13
OR
oraclemysqlMatch5.1.14
OR
oraclemysqlMatch5.1.15
OR
oraclemysqlMatch5.1.16
OR
oraclemysqlMatch5.1.17
VendorProductVersionCPE
mysqlmysql5.1.5cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*
oraclemysql5.1.6cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*
oraclemysql5.1.9cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*
oraclemysql5.1.10cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*
oraclemysql5.1.11cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*
oraclemysql5.1.12cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*
oraclemysql5.1.13cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*
oraclemysql5.1.14cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*
oraclemysql5.1.15cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*
oraclemysql5.1.16cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:N/A:N

AI Score

5.7

Confidence

Low

EPSS

0.002

Percentile

59.8%