CVE-2007-3781: Medium severity MySQL Community Server vulnerability

Published Jul 15, 2007

Updated

MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.

Affected Software

2 affected components

MySQL Community Server=5.0.41

MySQL Community Server=5.0.44

Event History

Jul 15, 2007

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3781?

CVE-2007-3781 is classified as a moderate severity vulnerability due to the potential exposure of sensitive information without proper privileges.

How do I fix CVE-2007-3781?

To fix CVE-2007-3781, update MySQL Community Server to version 5.0.45 or later where this vulnerability is addressed.

Which MySQL versions are affected by CVE-2007-3781?

CVE-2007-3781 affects MySQL Community Server versions 5.0.41 and 5.0.44.

What type of information can be exposed due to CVE-2007-3781?

CVE-2007-3781 can expose sensitive information such as the structure of the source table during a CREATE TABLE LIKE operation.

Can CVE-2007-3781 be exploited remotely?

Yes, CVE-2007-3781 can be exploited by remote authenticated users to gain unauthorized access to table structure information.