CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2692

The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 72.6%

CVSS Severity

CVSS v2 Score 6.0

References

Products affected by CVE-2007-2692

Mysql » Mysql » Version: 5.0.0

cpe:2.3:a:mysql:mysql:5.0.0
Mysql » Mysql » Version: 5.0.1

cpe:2.3:a:mysql:mysql:5.0.1
Mysql » Mysql » Version: 5.0.10

cpe:2.3:a:mysql:mysql:5.0.10
Mysql » Mysql » Version: 5.0.15

cpe:2.3:a:mysql:mysql:5.0.15
Mysql » Mysql » Version: 5.0.16

cpe:2.3:a:mysql:mysql:5.0.16
Mysql » Mysql » Version: 5.0.17

cpe:2.3:a:mysql:mysql:5.0.17
Mysql » Mysql » Version: 5.0.2

cpe:2.3:a:mysql:mysql:5.0.2
Mysql » Mysql » Version: 5.0.20

cpe:2.3:a:mysql:mysql:5.0.20
Mysql » Mysql » Version: 5.0.22.1.0.1

cpe:2.3:a:mysql:mysql:5.0.22.1.0.1
Mysql » Mysql » Version: 5.0.24

cpe:2.3:a:mysql:mysql:5.0.24
Mysql » Mysql » Version: 5.0.3

cpe:2.3:a:mysql:mysql:5.0.3
Mysql » Mysql » Version: 5.0.4

cpe:2.3:a:mysql:mysql:5.0.4
Mysql » Mysql » Version: 5.0.5

cpe:2.3:a:mysql:mysql:5.0.5
Mysql » Mysql » Version: 5.0.5.0.21

cpe:2.3:a:mysql:mysql:5.0.5.0.21
Mysql » Mysql » Version: 5.1.5

cpe:2.3:a:mysql:mysql:5.1.5
Oracle » Mysql » Version: 5.0.0

cpe:2.3:a:oracle:mysql:5.0.0
Oracle » Mysql » Version: 5.0.11

cpe:2.3:a:oracle:mysql:5.0.11
Oracle » Mysql » Version: 5.0.12

cpe:2.3:a:oracle:mysql:5.0.12
Oracle » Mysql » Version: 5.0.13

cpe:2.3:a:oracle:mysql:5.0.13
Oracle » Mysql » Version: 5.0.14

cpe:2.3:a:oracle:mysql:5.0.14
Oracle » Mysql » Version: 5.0.18

cpe:2.3:a:oracle:mysql:5.0.18
Oracle » Mysql » Version: 5.0.19

cpe:2.3:a:oracle:mysql:5.0.19
Oracle » Mysql » Version: 5.0.21

cpe:2.3:a:oracle:mysql:5.0.21
Oracle » Mysql » Version: 5.0.22

cpe:2.3:a:oracle:mysql:5.0.22
Oracle » Mysql » Version: 5.0.27

cpe:2.3:a:oracle:mysql:5.0.27
Oracle » Mysql » Version: 5.0.3

cpe:2.3:a:oracle:mysql:5.0.3
Oracle » Mysql » Version: 5.0.33

cpe:2.3:a:oracle:mysql:5.0.33
Oracle » Mysql » Version: 5.0.37

cpe:2.3:a:oracle:mysql:5.0.37
Oracle » Mysql » Version: 5.0.6

cpe:2.3:a:oracle:mysql:5.0.6
Oracle » Mysql » Version: 5.0.7

cpe:2.3:a:oracle:mysql:5.0.7
Oracle » Mysql » Version: 5.0.8

cpe:2.3:a:oracle:mysql:5.0.8
Oracle » Mysql » Version: 5.0.9

cpe:2.3:a:oracle:mysql:5.0.9
Oracle » Mysql » Version: 5.1.1

cpe:2.3:a:oracle:mysql:5.1.1
Oracle » Mysql » Version: 5.1.10

cpe:2.3:a:oracle:mysql:5.1.10
Oracle » Mysql » Version: 5.1.11

cpe:2.3:a:oracle:mysql:5.1.11
Oracle » Mysql » Version: 5.1.12

cpe:2.3:a:oracle:mysql:5.1.12
Oracle » Mysql » Version: 5.1.13

cpe:2.3:a:oracle:mysql:5.1.13
Oracle » Mysql » Version: 5.1.14

cpe:2.3:a:oracle:mysql:5.1.14
Oracle » Mysql » Version: 5.1.15

cpe:2.3:a:oracle:mysql:5.1.15
Oracle » Mysql » Version: 5.1.16

cpe:2.3:a:oracle:mysql:5.1.16
Oracle » Mysql » Version: 5.1.17

cpe:2.3:a:oracle:mysql:5.1.17
Oracle » Mysql » Version: 5.1.2

cpe:2.3:a:oracle:mysql:5.1.2
Oracle » Mysql » Version: 5.1.3

cpe:2.3:a:oracle:mysql:5.1.3
Oracle » Mysql » Version: 5.1.4

cpe:2.3:a:oracle:mysql:5.1.4
Oracle » Mysql » Version: 5.1.6

cpe:2.3:a:oracle:mysql:5.1.6
Oracle » Mysql » Version: 5.1.7

cpe:2.3:a:oracle:mysql:5.1.7
Oracle » Mysql » Version: 5.1.8

cpe:2.3:a:oracle:mysql:5.1.8
Oracle » Mysql » Version: 5.1.9

cpe:2.3:a:oracle:mysql:5.1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2692

Products

Pricing

Contact Us