VDB
CVE-2007-3781
CVE-2007-3781
PUBLISHED
CVSS 4 MEDIUM
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
EPSS 1.78% · 77.4th percentile
Risk Scores
CVSS 2.0
4
EPSS Score
1.78%
77.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mysql | community_server | 5.0.41, 5.0.44 |
| n/a | n/a | n/a |
Timeline
- Jul 15, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 29, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
References
- 28343 third-party-advisory
- 26073 third-party-advisory
- DSA-1451 vendor-advisory
- USN-559-1 vendor-advisory
- 20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server mailing-list
- SSA:2007-348-01 vendor-advisory
- 25301 third-party-advisory
- https://issues.rpath.com/browse/RPL-1536 url
- 26430 third-party-advisory
- oval:org.mitre.oval:def:9195 vdb
- 28128 third-party-advisory
- RHSA-2008:0364 vendor-advisory
- http://bugs.mysql.com/bug.php?id=25578 url
- 37783 vdb
- RHSA-2007:0894 vendor-advisory
- 26498 third-party-advisory
- [announce] 20070712 MySQL Community Server 5.0.45 has been released! mailing-list
- 25017 vdb
- GLSA-200708-10 vendor-advisory
- 26987 third-party-advisory
…and 7 more