CVE-2007-2691

Published: May 16, 2007Modified: Apr 23, 2026

4.9

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:P

Exploitability: 6.8 / Impact: 4.9

Source: NVD

Description

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.

Affected (8)

Products: Mysql: Mysql · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Up to 4.1.22
Mysql Mysql	From 5.0 to 5.0.42
Mysql Mysql	From 5.1 to 5.1.18

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04

References (64)

http://bugs.mysql.com/bug.php?id=27515

Source: cve@mitre.org

Vendor Advisory

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html

Source: cve@mitre.org

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.mysql.com/announce/470

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

Source: cve@mitre.org

Third Party Advisory

http://osvdb.org/34766

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/25301

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25946

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/26073

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/26430

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/27155

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/27823

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/28838

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/30351

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/31226

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/32222

Source: cve@mitre.org

Third Party Advisory

http://support.apple.com/kb/HT3216

Source: cve@mitre.org

Third Party Advisory

http://www.debian.org/security/2007/dsa-1413

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:139

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0894.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0364.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2008-0768.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/473874/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/24016

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/31681

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018069

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2007/1804

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2008/2780

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/34347

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-1536

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/528-1/

Source: cve@mitre.org

Third Party Advisory

http://bugs.mysql.com/bug.php?id=27515