CVE-2007-3782

Summary

CVE	CVE-2007-3782
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2007-07-15 22:30:00 UTC
Updated	2026-04-23 00:35:47 UTC
Description	MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.

Risk And Classification

Primary CVSS: v2.0 3.5 from [email protected]

AV:N/AC:M/Au:S/C:N/I:P/A:N

Problem Types: CWE-264 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Medium

Authentication

Single

Confidentiality

None

Integrity

Partial

Availability

None

AV:N/AC:M/Au:S/C:N/I:P/A:N

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Mysql	Community Server	5.0.41	All	All	All
Application	Mysql	Community Server	5.0.44	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
Mandriva update for mysql - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
Security Announcement	af854a3a-2127-422b-91ae-364da2661108	www.novell.com
USN-528-1: MySQL vulnerabilities \| Ubuntu security notices	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com
Ubuntu update for mysql - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
Advisories - Mandriva Linux	af854a3a-2127-422b-91ae-364da2661108	www.mandriva.com
rPath update for mysql, mysql-bench, and mysql-server - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
Debian update for mysql-dfsg, mysql-dfsg-5.0, and mysql-dfsg-4.1 - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
MySQL Lists: announce: MySQL Community Server 5.0.45 has been released!	af854a3a-2127-422b-91ae-364da2661108	lists.mysql.com
Support	af854a3a-2127-422b-91ae-364da2661108	www.redhat.com
rPath update for mysql, mysql-bench, and mysql-server - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
rhn.redhat.com \| Red Hat Support	af854a3a-2127-422b-91ae-364da2661108	www.redhat.com
MySQL Access Validation and Denial of Service Vulnerabilities	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
MySQL Denial of Service Vulnerability and Multiple Security Issues - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
SecurityFocus	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
MySQL Table View Access Bug Lets Remote Authenticated Users Gain Elevated Privileges - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	securitytracker.com
MySQL Bugs: #27878: Use of view overrides column update privileges on underlying table	af854a3a-2127-422b-91ae-364da2661108	bugs.mysql.com
Red Hat update for mysql - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
SUSE Update for Multiple Packages - Advisories - Secunia	af854a3a-2127-422b-91ae-364da2661108	secunia.com
MySQL AB :: MySQL 5.0 Reference Manual :: D.1.2 Release Notes for MySQL Community Server 5.0.45 (04 July 2007)	af854a3a-2127-422b-91ae-364da2661108	dev.mysql.com
Debian -- Security Information -- DSA-1413-1 mysql	af854a3a-2127-422b-91ae-364da2661108	www.debian.org
Repository / Oval Repository	af854a3a-2127-422b-91ae-364da2661108	oval.cisecurity.org
issues.rpath.com/browse/RPL-1536	af854a3a-2127-422b-91ae-364da2661108	issues.rpath.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Organization	Published	Contributor	Statement
Red Hat	2007-07-17	Mark J Cox	Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248553 The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.

There are currently no legacy QID mappings associated with this CVE.