NVD

Id
57994  
Name
CVE-2007-5970  
Description
MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified vectors involving use of table-level DATA DIRECTORY and INDEX DIRECTORY options when creating a partitioned table with the same name as a table on which the user lacks privileges.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-10  
Modified Date
2011-03-07  
Seq
2007-5970  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
297093 57994 CVE-2007-5970 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html  View
297094 57994 CVE-2007-5970 http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html  View
297095 57994 CVE-2007-5970 1019084  View
297096 57994 CVE-2007-5970 ADV-2008-0560  View
297097 57994 CVE-2007-5970 mysql-datadirectory-privilege-escalation(38988)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55940 JVNDB-2007-004632 MySQL における任意のテーブルの権限を取得される脆弱性 MySQL には、ユーザ権限のないテーブルと同一の名前でパーティションで区切られたテーブルが作成された際、任意のテーブルの権限を取得される脆弱性が存在します。 CVE-2007-5970 29325 CVE-2007-5970 57994 5.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004632.html 2007-12-10 2012-09-25 View