NVD

Id
55926  
Name
CVE-2007-3781  
Description
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-07-15  
Modified Date
2010-08-21  
Seq
2007-3781  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284504 55926 CVE-2007-3781 http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html  View
284505 55926 CVE-2007-3781 [announce] 20070712 MySQL Community Server 5.0.45 has been released!  View
284506 55926 CVE-2007-3781 oval:org.mitre.oval:def:9195  View
284507 55926 CVE-2007-3781 GLSA-200708-10  View
284508 55926 CVE-2007-3781 SSA:2007-348-01  View
284509 55926 CVE-2007-3781 DSA-1451  View
284510 55926 CVE-2007-3781 MDKSA-2007:243  View
284511 55926 CVE-2007-3781 RHSA-2007:0894  View
284512 55926 CVE-2007-3781 RHSA-2008:0364  View
284513 55926 CVE-2007-3781 20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server  View
284514 55926 CVE-2007-3781 25017  View
284515 55926 CVE-2007-3781 USN-559-1  View
284516 55926 CVE-2007-3781 https://issues.rpath.com/browse/RPL-1536  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51855 JVNDB-2007-000518 MySQL における SELECT 命令の権限を適切に検査しない問題 MySQL には CREATE TABLE LIKE ステートメントにおける参照元テーブルに対しての、SELECT など権限が必要な命令において、権限を適切に処理しない問題が存在します。 CVE-2007-3781 27136 CVE-2007-3781 55926 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000518.html 2007-06-21 2008-08-13 View