MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-07-15T22:00:00

Updated: 2024-08-07T14:28:52.493Z

Reserved: 2007-07-15T00:00:00

Link: CVE-2007-3781

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2007-07-15T22:30:00.000

Modified: 2024-11-21T00:34:03.063

Link: CVE-2007-3781

cve-icon Redhat

Severity : Low

Publid Date: 2007-07-04T00:00:00Z

Links: CVE-2007-3781 - Bugzilla