CVE-2007-3781
Priority
Low
Description
MySQL Community Server before 5.0.45 does not require privileges such as
SELECT for the source table in a CREATE TABLE LIKE statement, which allows
remote authenticated users to obtain sensitive information such as the
table structure.
SELECT for the source table in a CREATE TABLE LIKE statement, which allows
remote authenticated users to obtain sensitive information such as the
table structure.
References
Notes
jdstrand> very invasive patch. Discussed one-time MicroVersionUpdate with
pitti-- too many changes to warrant the update.
jdstrand> apparently Mandriva found a patch for this going back to 5.0.24
pitti-- too many changes to warrant the update.
jdstrand> apparently Mandriva found a patch for this going back to 5.0.24
Package
| Upstream: | released (5.0.45) |
| Ubuntu 8.04 LTS (Hardy Heron): | released (5.0.45-1ubuntu2) |