PT-2007-4010 · Oracle · Mysql Server

Publicado 2007-05-16 · Atualizado 2019-12-17 · CVE-2007-2693

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MySQL versions prior to 5.1.18

Description The issue allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.

Recommendations For versions prior to 5.1.18, update to version 5.1.18 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2693

Produtos afetados

Mysql Server

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-2693 · Nota de Segurança
• http://securityfocus.com/bid/24008 · Nota
• http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html · Correção
• http://secunia.com/advisories/25301 · Nota
• http://vupen.com/english/advisories/2007/1804 · Nota
• http://securitytracker.com/id?1018071 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34349 · Nota
• http://bugs.mysql.com/bug.php?id=23675 · Correção