NVD

Id
58298  
Name
CVE-2007-6303  
Description
MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-10  
Modified Date
2011-09-01  
Seq
2007-6303  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
298907 58298 CVE-2007-6303 http://bugs.mysql.com/bug.php?id=29908  View
298908 58298 CVE-2007-6303 http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html  View
298909 58298 CVE-2007-6303 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html  View
298910 58298 CVE-2007-6303 http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html  View
298911 58298 CVE-2007-6303 http://lists.mysql.com/announce/502  View
298912 58298 CVE-2007-6303 SUSE-SR:2008:003  View
298913 58298 CVE-2007-6303 GLSA-200804-04  View
298914 58298 CVE-2007-6303 1019085  View
298915 58298 CVE-2007-6303 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0040  View
298916 58298 CVE-2007-6303 MDVSA-2008:017  View
298917 58298 CVE-2007-6303 RHSA-2007:1157  View
298918 58298 CVE-2007-6303 20080205 rPSA-2008-0040-1 mysql mysql-bench mysql-server  View
298919 58298 CVE-2007-6303 26832  View
298920 58298 CVE-2007-6303 USN-588-1  View
298921 58298 CVE-2007-6303 ADV-2007-4198  View
298922 58298 CVE-2007-6303 mysql-definer-value-privilege-escalation(38989)  View
298923 58298 CVE-2007-6303 https://issues.rpath.com/browse/RPL-2187  View
298924 58298 CVE-2007-6303 FEDORA-2007-4465  View
298925 58298 CVE-2007-6303 FEDORA-2007-4471  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52321 JVNDB-2007-001011 MySQL の DEFINER 値の処理における権限昇格の脆弱性 MySQL には、定義を変更した際、定義の DEFINER 値を適切に更新しないため、CREATE SQL SECURITY DEFINER VIEW ステートメントおよび ALTER VIEW ステートメントによる、権限昇格の脆弱性が存在します。 CVE-2007-6303 29658 CVE-2007-6303 58298 3.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001011.html 2007-11-30 2008-02-29 View