CVE-2007-2691

MySQL <4.1.23, 5.0.x<5.0.42, 5.1.x<5.1.18 - Privilege Escalation

Title source: llm
STIX 2.1

Description

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.

References (32)

Core 32
Core References
Vendor Advisory x_refsource_misc
http://bugs.mysql.com/bug.php?id=27515
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27823
Patch, Vendor Advisory x_refsource_confirm
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2007-0894.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26073
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31681
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018069
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31226
Vendor Advisory mailing-list x_refsource_mlist
http://lists.mysql.com/announce/470
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1804
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0768.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34347
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25946
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/473874/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24016
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25301
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2007/dsa-1413
Broken Link vdb-entry x_refsource_osvdb
http://osvdb.org/34766
Broken Link x_refsource_confirm
https://issues.rpath.com/browse/RPL-1536
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32222
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/528-1/
Third Party Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:139
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30351
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27155
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26430
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2780
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28838
Third Party Advisory vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0364.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
Third Party Advisory x_refsource_confirm
http://support.apple.com/kb/HT3216

Scores

EPSS 0.0285
EPSS Percentile 85.2%

Details

Status published
Products (6)
canonical/ubuntu_linux 6.06
canonical/ubuntu_linux 6.10
canonical/ubuntu_linux 7.04
debian/debian_linux 3.1
debian/debian_linux 4.0
mysql/mysql < 4.1.22
Published May 16, 2007
Tracked Since Feb 18, 2026