NVD

Id
65760  
Name
CVE-2006-7217  
Description
Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2007-07-05  
Modified Date
2008-09-05  
Seq
2006-7217  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342407 65760 CVE-2006-7217 http://db.apache.org/derby/releases/release-10.2.1.6.html  View
342408 65760 CVE-2006-7217 http://issues.apache.org/jira/browse/DERBY-1858  View
342409 65760 CVE-2006-7217 SUSE-SR:2008:002  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52619 JVNDB-2007-001311 Apache Derby における SQL 認証モードで任意の投下スキーマ宣言文を実行される脆弱性 Apache Derby は、DropSchemaNode をバインドする際に、スキーマの権限の要件を特定しないため、SQL 認証モードで任意の投下スキーマ宣言文を実行される脆弱性が存在します。 CVE-2006-7217 23319 CVE-2006-7217 65760 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001311.html 2007-07-05 2012-06-26 View