MySQL Community Server before 5.0.45 does not require privileges such as
SELECT for the source table in a CREATE TABLE LIKE statement, which allows
remote authenticated users to obtain sensitive information such as the
jdstrand> very invasive patch. Discussed one-time MicroVersionUpdate with
pitti-- too many changes to warrant the update.
jdstrand> apparently Mandriva found a patch for this going back to 5.0.24
Updated: 2012-06-01 15:18:04 UTC (commit 5347)