CVE-2007-2691

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.85%

Published

May 16, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.

Affected Products (8)

mysql · mysqlvulnerable

mysql · mysql (up to 5.0.42)vulnerable

mysql · mysql (up to 5.1.18)vulnerable

debian · debian_linuxvulnerable

canonical · ubuntu_linuxvulnerable

References (20)

http://bugs.mysql.com/bug.php?id=27515

Vendor Advisory

http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html

PatchVendor Advisory

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Mailing ListThird Party Advisory

http://lists.mysql.com/announce/470

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

Third Party Advisory

http://osvdb.org/34766

Broken Link

http://secunia.com/advisories/25301

Third Party Advisory

http://secunia.com/advisories/25946

Third Party Advisory

http://secunia.com/advisories/26073

Third Party Advisory

http://secunia.com/advisories/26430

Third Party Advisory

http://secunia.com/advisories/27155

Third Party Advisory

http://secunia.com/advisories/27823

Third Party Advisory

http://secunia.com/advisories/28838

Third Party Advisory

http://secunia.com/advisories/30351

Third Party Advisory

http://secunia.com/advisories/31226

Third Party Advisory

http://secunia.com/advisories/32222

Third Party Advisory

http://support.apple.com/kb/HT3216

Third Party Advisory

http://www.debian.org/security/2007/dsa-1413

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:139

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0894.html

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs