CVE-2007-2691

Description (CNA)

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://bugs.mysql.com/bug.php?id=27515
• http://secunia.com/advisories/27823
• http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html
• http://www.redhat.com/support/errata/RHSA-2007-0894.html
• http://secunia.com/advisories/26073
• http://www.securityfocus.com/bid/31681
• http://www.securitytracker.com/id?1018069
• http://secunia.com/advisories/31226
• http://lists.mysql.com/announce/470
• http://www.vupen.com/english/advisories/2007/1804
• http://www.redhat.com/support/errata/RHSA-2008-0768.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34347
• http://secunia.com/advisories/25946
• http://www.securityfocus.com/archive/1/473874/100/0/threaded
• http://www.securityfocus.com/bid/24016
• http://secunia.com/advisories/25301
• http://www.debian.org/security/2007/dsa-1413
• http://osvdb.org/34766
• https://issues.rpath.com/browse/RPL-1536
• http://secunia.com/advisories/32222
• https://usn.ubuntu.com/528-1/
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:139
• http://secunia.com/advisories/30351
• http://secunia.com/advisories/27155
• http://secunia.com/advisories/26430
• http://www.vupen.com/english/advisories/2008/2780
• http://secunia.com/advisories/28838
• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
• http://www.redhat.com/support/errata/RHSA-2008-0364.html
• http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
• http://support.apple.com/kb/HT3216
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559

ADP enrichment