CVE-2007-2692

Published: May 16, 2007Modified: Apr 23, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.

Affected (48)

Products: Mysql: Mysql · Oracle: Mysql

1 product

1 product

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Version 5.0.0
Mysql Mysql	Version 5.0.10
Mysql Mysql	Version 5.0.15
Mysql Mysql	Version 5.0.16
Mysql Mysql	Version 5.0.17
Mysql Mysql	Version 5.0.1
Mysql Mysql	Version 5.0.20
Mysql Mysql	Version 5.0.22.1.0.1
Mysql Mysql	Version 5.0.24
Mysql Mysql	Version 5.0.2
Mysql Mysql	Version 5.0.3
Mysql Mysql	Version 5.0.4
Mysql Mysql	Version 5.0.5.0.21
Mysql Mysql	Version 5.0.5
Mysql Mysql	Version 5.1.5
Oracle Mysql	Version 5.0.0 alpha
Oracle Mysql	Version 5.0.11
Oracle Mysql	Version 5.0.12
Oracle Mysql	Version 5.0.13
Oracle Mysql	Version 5.0.14
Oracle Mysql	Version 5.0.18
Oracle Mysql	Version 5.0.19
Oracle Mysql	Version 5.0.21
Oracle Mysql	Version 5.0.22
Oracle Mysql	Version 5.0.27
Oracle Mysql	Version 5.0.33
Oracle Mysql	Version 5.0.37
Oracle Mysql	Version 5.0.3 beta
Oracle Mysql	Version 5.0.6
Oracle Mysql	Version 5.0.7
Oracle Mysql	Version 5.0.8
Oracle Mysql	Version 5.0.9
Oracle Mysql	Version 5.1.10
Oracle Mysql	Version 5.1.11
Oracle Mysql	Version 5.1.12
Oracle Mysql	Version 5.1.13
Oracle Mysql	Version 5.1.14
Oracle Mysql	Version 5.1.15
Oracle Mysql	Version 5.1.16
Oracle Mysql	Version 5.1.17
Oracle Mysql	Version 5.1.1
Oracle Mysql	Version 5.1.2
Oracle Mysql	Version 5.1.3
Oracle Mysql	Version 5.1.4
Oracle Mysql	Version 5.1.6
Oracle Mysql	Version 5.1.7
Oracle Mysql	Version 5.1.8
Oracle Mysql	Version 5.1.9

References (50)

http://bugs.mysql.com/bug.php?id=27337

Source: cve@mitre.org

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html

Source: cve@mitre.org

http://lists.mysql.com/announce/470

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

Source: cve@mitre.org

http://osvdb.org/34765

Source: cve@mitre.org

http://secunia.com/advisories/25301

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26073

Source: cve@mitre.org

http://secunia.com/advisories/26430

Source: cve@mitre.org

http://secunia.com/advisories/27823

Source: cve@mitre.org

http://secunia.com/advisories/28637

Source: cve@mitre.org

http://secunia.com/advisories/28838

Source: cve@mitre.org

http://secunia.com/advisories/29443

Source: cve@mitre.org

http://secunia.com/advisories/30351

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1413

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:028

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0894.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0364.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/473874/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24011

Source: cve@mitre.org

http://www.securitytracker.com/id?1018070

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-588-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1804

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34348

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1536

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9166

Source: cve@mitre.org

http://bugs.mysql.com/bug.php?id=27337

Source: af854a3a-2127-422b-91ae-364da2661108

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.mysql.com/announce/470

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/34765

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/25301

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/26073

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26430

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27823

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28637

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28838

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29443

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30351

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1413

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:028

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-0894.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0364.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/473874/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/24011

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018070

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-588-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/1804

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/34348

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1536

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9166

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.