« List of all CVEs

CVE-2007-2692

Published: 5/16/2007 Last updated: 8/7/2024 Reserved: 5/15/2007

The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

Products affected (1)

Product	Vendor	Version
n/a	n/a	3.13.0S

References (50)