Vulnerability Description
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.
CVSS Score
3.5
LOW
AV:N/AC:M/Au:S/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mysql | Community Server | 5.0.41 |
Related Weaknesses (CWE)
References
- http://bugs.mysql.com/bug.php?id=27878
- http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html
- http://lists.mysql.com/announce/470
- http://secunia.com/advisories/25301
- http://secunia.com/advisories/26073
- http://secunia.com/advisories/26430
- http://secunia.com/advisories/26710
- http://secunia.com/advisories/26987
- http://secunia.com/advisories/27155
- http://secunia.com/advisories/27823
- http://secunia.com/advisories/30351
- http://securitytracker.com/id?1018663
- http://www.debian.org/security/2007/dsa-1413
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:177
- http://www.novell.com/linux/security/advisories/2007_19_sr.html
FAQ
What is CVE-2007-3782?
CVE-2007-3782 is a vulnerability with a CVSS score of 3.5 (LOW). MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.
How severe is CVE-2007-3782?
CVE-2007-3782 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-3782?
Check the references section above for vendor advisories and patch information. Affected products include: Mysql Community Server.