CVE-2007-2691 in MySQL
摘要 (英语)
MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
预定
2007-05-15
披露
2007-05-15
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 36812 | MySQL | 概念验证 | 官方修复 | CVE-2007-2691 |