Lucene search
FreeBSDBB4E9A44-DFF2-11DD-A765-0030843D3802HistoryMay 14, 2007 - 12:00 a.m.
mysql -- renaming of arbitrary tables by authenticated users
2007-05-1400:00:00
vuxml.freebsd.org
16
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
0.008 Low
EPSS
Percentile
81.9%
MySQL reports:
The requirement of the DROP privilege for RENAME TABLE was not
enforced.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | mysql-server | = 4.1 | UNKNOWN |
| FreeBSD | any | noarch | mysql-server | < 4.1.23 | UNKNOWN |
References
Related
prion
prion
Code injection
2007-05-16 01:19:00
cve
cve
CVE-2007-2691
2007-05-16 01:19:00
veracode
veracode
Privilege Escalation
2020-04-10 00:25:17
nessus
nessus
FreeBSD : mysql -- renaming of arbitrary tables by authenticated users (bb4e9a44-dff2-11dd-a765-0030843d3802)
2009-01-12 00:00:00
MySQL < 4.1.23 / 5.0.42 Access Control Vulnerability
2012-01-18 00:00:00
Mandrake Linux Security Advisory : MySQL (MDKSA-2007:139)
2007-07-05 00:00:00
openvas
openvas
FreeBSD Ports: mysql-server
2009-01-13 00:00:00
FreeBSD Ports: mysql-server
2009-01-13 00:00:00
Mandriva Update for MySQL MDKSA-2007:139 (MySQL)
2009-04-09 00:00:00
securityvulns
securityvulns
MySQL RENAME privilege escalation
2007-07-05 00:00:00
[email protected], [email protected]
2007-10-13 00:00:00
MySQL multiple security vulnerabilities
2007-10-13 00:00:00
ubuntucve
ubuntucve
CVE-2007-2691
2007-05-16 00:00:00
redhat
redhat
(RHSA-2008:0768) Moderate: mysql security, bug fix, and enhancement update
2008-07-24 00:00:00
(RHSA-2007:0894) Important: mysql security update
2007-09-10 00:00:00
(RHSA-2008:0364) Low: mysql security and bug fix update
2008-05-20 00:00:00
ubuntu
ubuntu
MySQL vulnerabilities
2007-10-11 00:00:00
debian
debian
[SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities
2007-11-26 17:20:12
[SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities
2007-11-26 00:00:00
oraclelinux
oraclelinux
mysql security, bug fix, and enhancement update
2008-08-01 00:00:00
mysql security and bug fix update
2008-05-30 00:00:00
osv
osv
mysql - multiple
2007-11-26 00:00:00
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
0.008 Low
EPSS
Percentile
81.9%
Related for BB4E9A44-DFF2-11DD-A765-0030843D3802