CVE-2007-3782
published 2007-07-15CVE-2007-3782: MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this…
PriorityP416low3.5CVSS 2.0
AVNACMAuSCNIPAN
EPSS
1.57%
72.2th percentile
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mysql | community_server | — | — |
| mysql | community_server | — | — |
CVSS provenance
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
vendor_ubuntu4.0MEDIUM
vendor_redhat3.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j68c-fr78-mc97: MySQL Community Server before 5
ghsa_unreviewed·2022-05-01
CVE-2007-3782 [LOW] GHSA-j68c-fr78-mc97: MySQL Community Server before 5
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.
Ubuntu
MySQL vulnerabilities
vendor_ubuntu·2007-10-11·CVSS 4.0
CVE-2007-3782 [MEDIUM] MySQL vulnerabilities
Title: MySQL vulnerabilities
Summary: MySQL vulnerabilities
Neil Kettle discovered that MySQL could be made to dereference a NULL
pointer and divide by zero. An authenticated user could exploit this
with a crafted IF clause, leading to a denial of service. (CVE-2007-2583)
Victoria Reznichenko discovered that MySQL did not always require the
DROP privilege. An authenticated user could exploit this via RENAME
TABLE statements to rename arbitrary tables, possibly gaining additional
database access. (CVE-2007-2691)
It was discovered that MySQL could be made to overflow a signed char
during authentication. Remote attackers could use crafted authentication
requests to cause a denial of service. (CVE-2007-3780)
Phil Anderton discovered that MySQL did not properly verify access
privileges whe
Red Hat
New release of MySQL fixes security bugs
vendor_redhat·2007-07-04·CVSS 3.5
CVE-2007-3782 [LOW] New release of MySQL fixes security bugs
New release of MySQL fixes security bugs
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.
Statement: Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248553
The Red Hat Product Security has rated this issue as having low security impact, a future update may address this flaw.
No detection rules found.
No public exploits indexed.
http://bugs.mysql.com/bug.php?id=27878http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.htmlhttp://lists.mysql.com/announce/470http://secunia.com/advisories/25301http://secunia.com/advisories/26073http://secunia.com/advisories/26430http://secunia.com/advisories/26710http://secunia.com/advisories/26987http://secunia.com/advisories/27155http://secunia.com/advisories/27823http://secunia.com/advisories/30351http://securitytracker.com/id?1018663http://www.debian.org/security/2007/dsa-1413http://www.mandriva.com/security/advisories?name=MDKSA-2007:177http://www.novell.com/linux/security/advisories/2007_19_sr.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0894.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0364.htmlhttp://www.securityfocus.com/archive/1/473874/100/0/threadedhttp://www.securityfocus.com/bid/25017https://issues.rpath.com/browse/RPL-1536https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563https://usn.ubuntu.com/528-1/http://bugs.mysql.com/bug.php?id=27878http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.htmlhttp://lists.mysql.com/announce/470http://secunia.com/advisories/25301http://secunia.com/advisories/26073http://secunia.com/advisories/26430http://secunia.com/advisories/26710http://secunia.com/advisories/26987http://secunia.com/advisories/27155http://secunia.com/advisories/27823http://secunia.com/advisories/30351http://securitytracker.com/id?1018663http://www.debian.org/security/2007/dsa-1413http://www.mandriva.com/security/advisories?name=MDKSA-2007:177http://www.novell.com/linux/security/advisories/2007_19_sr.htmlhttp://www.redhat.com/support/errata/RHSA-2007-0894.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0364.htmlhttp://www.securityfocus.com/archive/1/473874/100/0/threadedhttp://www.securityfocus.com/bid/25017https://issues.rpath.com/browse/RPL-1536https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563https://usn.ubuntu.com/528-1/
2007-07-15
Published