Lucene search

F5F5:K8178

HistoryMar 18, 2013 - 12:00 a.m.

K8178 : MySQL vulnerabilities CVE-2007-5925, CVE-2007-5969, and CVE-2007-6303

2013-03-1800:00:00

my.f5.com

AI Score

9.6

Confidence

High

EPSS

0.097

Percentile

94.9%

JSON

Security Advisory Description

Note: Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F5 security vulnerability response policy.F5 products and versions that have been evaluated for this Security Advisory

Product	Affected	Not Affected
BIG-IP LTM	9.0.0 - 9.4.8	10.x
11.x
BIG-IP GTM	9.2.2 - 9.4.8	10.x
11.x
BIG-IP ASM	9.2.0 - 9.4.8	10.x
11.x
BIG-IP Link Controller	9.2.2 - 9.4.8	10.x
11.x
BIG-IP WebAccelerator	9.4.0 - 9.4.8	10.x
11.x
BIG-IP PSM	9.4.5 - 9.4.8	10.x
11.x
BIG-IP WAN Optimization	None	10.x
11.x
BIG-IP APM	None	10.x
11.x
BIG-IP Edge Gateway	None	10.x
11.x
BIG-IP Analytics	None	11.x
BIG-IP AFM	None	11.x
BIG-IP PEM	None	11.x
Enterprise Manager	1.0.0 - 1.6.0	1.7.0 - 1.8.0
2.x
3.x
Vulnerability description and product information
Information about these advisories is available at the following locations:

<https://vulners.com/cve/CVE-2007-5925>
An authenticated user who can issue SQL commands could crash the database server.
<https://vulners.com/cve/CVE-2007-5969>
A malicious user with filesystem access could cause data loss on the filesystem.
<https://vulners.com/cve/CVE-2007-6303>
VIEW definition updates do not occur correctly, allowing an authenticated user to bypass security around the VIEW