CVE-2007-3781

Description

MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.

4.0

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 0.35%

Vendor Advisory redhat.com Vendor Advisory debian.org Vendor Advisory ubuntu.com Vendor Advisory gentoo.org Vendor Advisory slackware.com Vendor Advisory mandriva.com Vendor Advisory redhat.com

Affected: n/a n/a

References

Link	Tags
http://bugs.mysql.com/bug.php?id=25578
http://secunia.com/advisories/28343	third party advisory
http://osvdb.org/37783	vdb entry
http://www.redhat.com/support/errata/RHSA-2007-0894.html	vendor advisory
http://secunia.com/advisories/26073	third party advisory
http://secunia.com/advisories/26498	third party advisory
http://lists.mysql.com/announce/470	mailing list
http://www.debian.org/security/2008/dsa-1451	vendor advisory
http://www.securityfocus.com/bid/25017	vdb entry
https://usn.ubuntu.com/559-1/	vendor advisory
http://www.securityfocus.com/archive/1/473874/100/0/threaded	mailing list
http://security.gentoo.org/glsa/glsa-200708-10.xml	vendor advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959	vendor advisory
http://secunia.com/advisories/26987	third party advisory
http://secunia.com/advisories/25301	third party advisory
http://secunia.com/advisories/28040	third party advisory
https://issues.rpath.com/browse/RPL-1536
http://secunia.com/advisories/30351	third party advisory
http://secunia.com/advisories/28108	third party advisory
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html
http://secunia.com/advisories/26430	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9195	signature vdb entry
http://secunia.com/advisories/28128	third party advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:243	vendor advisory
http://www.redhat.com/support/errata/RHSA-2008-0364.html	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2007-3781?: CVE-2007-3781 has been scored as a medium severity vulnerability.
How to fix CVE-2007-3781?: To fix CVE-2007-3781, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-3781 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2007-3781 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.