CVE-2007-2692 in mysql
Résumé (Anglaise)
The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.
Réserver
15/05/2007
Divulgation
15/05/2007
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 36813 | mysql db_access Stocké déni de service | 404 | Preuve de concept | Correctif officiel | CVE-2007-2692 |