VULNERABILITY INTELLIGENCE
CVE-2007-2691
CVSS score4.9 MEDIUM
EPSS probability2.85%
CISA KEVNot currently listed
Published2007-05-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:P
Description
MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Broken Link
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory