MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-07-15T22:00:00
Updated: 2024-08-07T14:28:52.493Z
Reserved: 2007-07-15T00:00:00
Link: CVE-2007-3781
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-07-15T22:30:00.000
Modified: 2024-11-21T00:34:03.063
Link: CVE-2007-3781
Redhat