CVE-2007-2693: Low severity MySQL mysql vulnerability
Published May 16, 2007
·Updated
MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.
Affected Software
11 affected components
MySQL mysql=5.1.5
Oracle MySQL=5.1.6
Oracle MySQL=5.1.9
Oracle MySQL=5.1.10
Oracle MySQL=5.1.11
Oracle MySQL=5.1.12
Oracle MySQL=5.1.13
Oracle MySQL=5.1.14
Oracle MySQL=5.1.15
Oracle MySQL=5.1.16
Oracle MySQL=5.1.17
Remediation
Patch Available
Patch Available
Event History
May 16, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2693?
CVE-2007-2693 is considered a medium severity vulnerability due to its potential to expose sensitive data.
2
How do I fix CVE-2007-2693?
To fix CVE-2007-2693, upgrade MySQL to version 5.1.18 or later.
3
Who is affected by CVE-2007-2693?
CVE-2007-2693 affects remote authenticated users without SELECT privileges on MySQL versions prior to 5.1.18.
4
What types of information can be exposed due to CVE-2007-2693?
CVE-2007-2693 can allow exposure of sensitive information from partitioned tables.
5
Is there a workaround for CVE-2007-2693?
A potential workaround for CVE-2007-2693 is to restrict access to ALTER TABLE statements to users with appropriate privileges.