Unscored severity · published Feb 18, 2008
CVE-2007-6313
MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG…
–
CVSS
1.3%
EPSS
No
On KEV
Description
MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote authorized users to execute arbitrary BINLOG statements.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Mysql Community Server · Mysql
5.1.1; 5.1.2; 5.1.3; 5.1.4; 5.1.5; 5.1.6; +20 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6313
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6313
bugs.mysql.com
http://bugs.mysql.com/31611
dev.mysql.com
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html
osvdb.org
http://osvdb.org/43179
www.securitytracker.com
http://www.securitytracker.com/id?1019083
www.vupen.com
http://www.vupen.com/english/advisories/2008/0560/references
More from Mysql Community Server
–
CVE-2012-1696
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to…