CVE-2007-2691

2007-05-1600:00:00

ubuntu.com

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:P/A:P

0.008 Low

EPSS

Percentile

82.1%

JSON

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not
require the DROP privilege for RENAME TABLE statements, which allows remote
authenticated users to rename arbitrary tables.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmysql-dfsg-5.0< 5.0.22-0ubuntu6.06.5UNKNOWN
ubuntu6.10noarchmysql-dfsg-5.0< 5.0.24a-9ubuntu2.1UNKNOWN
ubuntu7.04noarchmysql-dfsg-5.0< 5.0.38-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	mysql-dfsg-5.0	< 5.0.22-0ubuntu6.06.5	UNKNOWN
ubuntu	6.10	noarch	mysql-dfsg-5.0	< 5.0.24a-9ubuntu2.1	UNKNOWN
ubuntu	7.04	noarch	mysql-dfsg-5.0	< 5.0.38-0ubuntu1.1	UNKNOWN