ByteOS Network

CVE Vulnerability Details :

CVE-2007-6303

PUBLISHED

More Info Official Page

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-10 Dec, 2007 | 21:00

Updated At-07 Aug, 2024 | 16:02

▼CVE Numbering Authority (CNA)

MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

References

Hyperlink	Resource
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0040	x_refsource_CONFIRM
http://lists.mysql.com/announce/502	x_refsource_CONFIRM
http://security.gentoo.org/glsa/glsa-200804-04.xml	vendor-advisory x_refsource_GENTOO
http://secunia.com/advisories/29706	third-party-advisory x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/38989	vdb-entry x_refsource_XF
http://secunia.com/advisories/29443	third-party-advisory x_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=MDVSA-2008:017	vendor-advisory x_refsource_MANDRIVA
https://issues.rpath.com/browse/RPL-2187	x_refsource_CONFIRM
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html	vendor-advisory x_refsource_FEDORA
http://www.redhat.com/support/errata/RHSA-2007-1157.html	vendor-advisory x_refsource_REDHAT
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/4198	vdb-entry x_refsource_VUPEN
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html	vendor-advisory x_refsource_FEDORA
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html	x_refsource_CONFIRM
http://bugs.mysql.com/bug.php?id=29908	x_refsource_CONFIRM
http://www.securityfocus.com/bid/26832	vdb-entry x_refsource_BID
http://securitytracker.com/id?1019085	vdb-entry x_refsource_SECTRACK
http://secunia.com/advisories/28025	third-party-advisory x_refsource_SECUNIA
http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html	x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/487606/100/0/threaded	mailing-list x_refsource_BUGTRAQ
http://secunia.com/advisories/28838	third-party-advisory x_refsource_SECUNIA
http://www.ubuntu.com/usn/usn-588-1	vendor-advisory x_refsource_UBUNTU
http://secunia.com/advisories/28063	third-party-advisory x_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html	vendor-advisory x_refsource_SUSE
http://secunia.com/advisories/28739	third-party-advisory x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0040	x_refsource_CONFIRM x_transferred
http://lists.mysql.com/announce/502	x_refsource_CONFIRM x_transferred
http://security.gentoo.org/glsa/glsa-200804-04.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/29706	third-party-advisory x_refsource_SECUNIA x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/38989	vdb-entry x_refsource_XF x_transferred
http://secunia.com/advisories/29443	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2008:017	vendor-advisory x_refsource_MANDRIVA x_transferred
https://issues.rpath.com/browse/RPL-2187	x_refsource_CONFIRM x_transferred
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.redhat.com/support/errata/RHSA-2007-1157.html	vendor-advisory x_refsource_REDHAT x_transferred
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2007/4198	vdb-entry x_refsource_VUPEN x_transferred
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html	vendor-advisory x_refsource_FEDORA x_transferred
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html	x_refsource_CONFIRM x_transferred
http://bugs.mysql.com/bug.php?id=29908	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/bid/26832	vdb-entry x_refsource_BID x_transferred
http://securitytracker.com/id?1019085	vdb-entry x_refsource_SECTRACK x_transferred
http://secunia.com/advisories/28025	third-party-advisory x_refsource_SECUNIA x_transferred
http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html	x_refsource_CONFIRM x_transferred
http://www.securityfocus.com/archive/1/487606/100/0/threaded	mailing-list x_refsource_BUGTRAQ x_transferred
http://secunia.com/advisories/28838	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.ubuntu.com/usn/usn-588-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://secunia.com/advisories/28063	third-party-advisory x_refsource_SECUNIA x_transferred
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html	vendor-advisory x_refsource_SUSE x_transferred
http://secunia.com/advisories/28739	third-party-advisory x_refsource_SECUNIA x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References