1. CVE-Search
  2. CVE-2007-6303
ID CVE-2007-6303
Summary MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement.
References
Vulnerable Configurations
  • cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.22.1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*
    cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:6.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:6.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:6.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:6.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:6.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:6.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:6.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:6.0.3:*:*:*:*:*:*:*
CVSS
Base: 3.5 (as of 17-12-2019 - 20:16)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:S/C:N/I:P/A:N
redhat via4
advisories
rhsa
id RHSA-2007:1157
rpms
  • mysql-0:5.0.44-2.el4s1.1
  • mysql-0:5.0.44-3.el5s2
  • mysql-bench-0:5.0.44-2.el4s1.1
  • mysql-bench-0:5.0.44-3.el5s2
  • mysql-cluster-0:5.0.44-2.el4s1.1
  • mysql-cluster-0:5.0.44-3.el5s2
  • mysql-debuginfo-0:5.0.44-2.el4s1.1
  • mysql-debuginfo-0:5.0.44-3.el5s2
  • mysql-devel-0:5.0.44-2.el4s1.1
  • mysql-devel-0:5.0.44-3.el5s2
  • mysql-libs-0:5.0.44-2.el4s1.1
  • mysql-libs-0:5.0.44-3.el5s2
  • mysql-server-0:5.0.44-2.el4s1.1
  • mysql-server-0:5.0.44-3.el5s2
  • mysql-test-0:5.0.44-2.el4s1.1
  • mysql-test-0:5.0.44-3.el5s2
refmap via4
bid 26832
bugtraq 20080205 rPSA-2008-0040-1 mysql mysql-bench mysql-server
confirm
fedora
  • FEDORA-2007-4465
  • FEDORA-2007-4471
gentoo GLSA-200804-04
mandriva MDVSA-2008:017
sectrack 1019085
secunia
  • 28025
  • 28063
  • 28739
  • 28838
  • 29443
  • 29706
suse SUSE-SR:2008:003
ubuntu USN-588-1
vupen ADV-2007-4198
xf mysql-definer-value-privilege-escalation(38989)
statements via4
contributor Mark J Cox
lastmodified 2008-01-09
organization Red Hat
statement This issue did not affect the mysql packages as shipped in Red Hat Enterprise Linux 2.1, 3, 4, or 5. This issue affected the mysql packages as shipped in Red Hat Application Stack v1 and v2 and was addressed by RHSA-2007:1157: http://rhn.redhat.com/errata/RHSA-2007-1157.html
Last major update 17-12-2019 - 20:16
Published 10-12-2007 - 21:46
Last modified 17-12-2019 - 20:16
Back to Top