Unscored severity · published Jul 15, 2007
CVE-2007-3782
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table
–
CVSS
1.6%
EPSS
No
On KEV
Description
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Community Server · Mysql
5.0.41; 5.0.44 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3782
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3782
bugs.mysql.com
http://bugs.mysql.com/bug.php?id=27878
dev.mysql.com
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html
lists.mysql.com
http://lists.mysql.com/announce/470
secunia.com
http://secunia.com/advisories/25301
secunia.com
http://secunia.com/advisories/26073
secunia.com
http://secunia.com/advisories/26430
More from Community Server
–
CVE-2007-5969
MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks…
–
CVE-2007-3780
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol
–
CVE-2007-3781
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to…