CVE-2007-5969

CVE-2007-5969 affects MySQL when a table uses explicit DATA DIRECTORY or INDEX DIRECTORY options. A remote authenticated user can abuse RENAME TABLE to change the symlink to an existing file, overwriting system table information and potentially gaining privileges. Affected releases per descriptio...

CVE-2007-3780

CVE-2007-3780 affects MySQL Community Server prior to 5.0.45. The vulnerability is a remote denial-of-service caused by a malformed password packet in the connection protocol, enabling a remote attacker to crash the daemon. Multiple connected sources (NVD entry and OpenVAS/Nessus references) conf...

CVE-2007-3781

CVE-2007-3781 affects MySQL Community Server prior to 5.0.45. The vulnerability arises because a CREATE TABLE LIKE statement does not require privileges (e.g., SELECT) on the source table, allowing an authenticated remote user to obtain sensitive information such as the table structure. Connected...

CVE-2007-3782

CVE-2007-3782 affects MySQL Community Server up to version 5.0.44; remote authenticated users can gain update privileges for a table in another database through a view that refers to an external table. Root cause: a view cross-database reference allows privilege escalation. A fix is available in ...