CVE-2007-3781

2007-07-1500:00:00

ubuntu.com

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

74.4%

JSON

MySQL Community Server before 5.0.45 does not require privileges such as
SELECT for the source table in a CREATE TABLE LIKE statement, which allows
remote authenticated users to obtain sensitive information such as the
table structure.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/mysql-dfsg-5.1/+bug/172260>

Notes

Author	Note
jdstrand	very invasive patch. Discussed one-time MicroVersionUpdate with pitti-- too many changes to warrant the update. apparently Mandriva found a patch for this going back to 5.0.24

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmysql-dfsg-5.0< 5.0.22-0ubuntu6.06.6UNKNOWN
ubuntu6.10noarchmysql-dfsg-5.0< 5.0.24a-9ubuntu2.2UNKNOWN
ubuntu7.04noarchmysql-dfsg-5.0< 5.0.38-0ubuntu1.2UNKNOWN
ubuntu7.10noarchmysql-dfsg-5.0< 5.0.45-1ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	mysql-dfsg-5.0	< 5.0.22-0ubuntu6.06.6	UNKNOWN
ubuntu	6.10	noarch	mysql-dfsg-5.0	< 5.0.24a-9ubuntu2.2	UNKNOWN
ubuntu	7.04	noarch	mysql-dfsg-5.0	< 5.0.38-0ubuntu1.2	UNKNOWN
ubuntu	7.10	noarch	mysql-dfsg-5.0	< 5.0.45-1ubuntu2	UNKNOWN