BNLug - MySQL Rename Table Function Access Validation Vulnerability

MySQL Rename Table Function Access Validation Vulnerability

TITLE: MySQL Rename Table Function Access Validation Vulnerability
CLASS: Access Validation Error
CVE: CVE-2007-2691

REMOTE: Yes
LOCAL: No
PUBLISHED: May 16 2007 12:00AM
UPDATE: May 16 2007 09:58PM
CREDIT: The vendor disclosed this issue.
VULNERABLE:

MySQL AB MySQL 5.1.17
MySQL AB MySQL 5.1.16
MySQL AB MySQL 5.1.15
MySQL AB MySQL 5.1.14
MySQL AB MySQL 5.1.13
MySQL AB MySQL 5.1.12
MySQL AB MySQL 5.1.11
MySQL AB MySQL 5.1.10
MySQL AB MySQL 5.1.9
MySQL AB MySQL 5.1.6
MySQL AB MySQL 5.1.5
MySQL AB MySQL 5.0.40
MySQL AB MySQL 5.0.39
MySQL AB MySQL 5.0.38
MySQL AB MySQL 5.0.37
MySQL AB MySQL 5.0.36
MySQL AB MySQL 5.0.33
MySQL AB MySQL 5.0.27
MySQL AB MySQL 5.0.24
MySQL AB MySQL 5.0.22 -1-0.1
MySQL AB MySQL 5.0.22
MySQL AB MySQL 5.0.21
MySQL AB MySQL 5.0.20
MySQL AB MySQL 5.0.19
MySQL AB MySQL 5.0.18
MySQL AB MySQL 5.0.4
MySQL AB MySQL 5.0.3
MySQL AB MySQL 5.0.2
MySQL AB MySQL 5.0.1
MySQL AB MySQL 5.0 .0-alpha
MySQL AB MySQL 5.0 .0-0
MySQL AB MySQL 4.1.21
MySQL AB MySQL 4.1.20
MySQL AB MySQL 4.1.19
MySQL AB MySQL 4.1.18
MySQL AB MySQL 4.1.16
MySQL AB MySQL 4.1.15
MySQL AB MySQL 4.1.13
MySQL AB MySQL 4.1.12
MySQL AB MySQL 4.1.11
MySQL AB MySQL 4.1.7
MySQL AB MySQL 4.1.5
MySQL AB MySQL 4.1.4
MySQL AB MySQL 4.1.3 -beta
MySQL AB MySQL 4.1.3 -beta
MySQL AB MySQL 4.1.3 -0
MySQL AB MySQL 4.1.2 -alpha
MySQL AB MySQL 4.1.2
MySQL AB MySQL 4.1.1
MySQL AB MySQL 4.1 .11
MySQL AB MySQL 4.0.27
MySQL AB MySQL 4.0.26
MySQL AB MySQL 4.0.25
MySQL AB MySQL 4.0.24
+ Debian Linux 3.1 sparc
+ Debian Linux 3.1 s/390
+ Debian Linux 3.1 ppc
+ Debian Linux 3.1 mipsel
+ Debian Linux 3.1 mips
+ Debian Linux 3.1 m68k
+ Debian Linux 3.1 ia-64
+ Debian Linux 3.1 ia-32
+ Debian Linux 3.1 hppa
+ Debian Linux 3.1 arm
+ Debian Linux 3.1 amd64
+ Debian Linux 3.1 alpha
+ Debian Linux 3.1
MySQL AB MySQL 4.0.23
+ Ubuntu Ubuntu Linux 5.0 4 powerpc
+ Ubuntu Ubuntu Linux 5.0 4 i386
+ Ubuntu Ubuntu Linux 5.0 4 amd64
MySQL AB MySQL 4.0.21
MySQL AB MySQL 4.0.20
+ MandrakeSoft Linux Mandrake 10.1 x86_64
+ MandrakeSoft Linux Mandrake 10.1
+ Ubuntu Ubuntu Linux 4.1 ppc
+ Ubuntu Ubuntu Linux 4.1 ia64
+ Ubuntu Ubuntu Linux 4.1 ia32
MySQL AB MySQL 4.0.19
MySQL AB MySQL 4.0.18
+ MandrakeSoft Corporate Server 3.0 x86_64
+ MandrakeSoft Corporate Server 3.0
+ MandrakeSoft Linux Mandrake 10.0 AMD64
+ MandrakeSoft Linux Mandrake 10.0
MySQL AB MySQL 4.0.17
MySQL AB MySQL 4.0.15
+ Conectiva Linux 10.0
+ MandrakeSoft Linux Mandrake 9.2 amd64
+ MandrakeSoft Linux Mandrake 9.2
+ OpenPKG OpenPKG Current
MySQL AB MySQL 4.0.14
+ OpenPKG OpenPKG 1.3
+ OpenPKG OpenPKG Current
+ Trustix Secure Linux 2.0
MySQL AB MySQL 4.0.13
MySQL AB MySQL 4.0.12
MySQL AB MySQL 4.0.11 -gamma
MySQL AB MySQL 4.0.11
+ MandrakeSoft Linux Mandrake 9.1 ppc
+ MandrakeSoft Linux Mandrake 9.1
MySQL AB MySQL 4.0.10
MySQL AB MySQL 4.0.9 -gamma
MySQL AB MySQL 4.0.9
MySQL AB MySQL 4.0.8 -gamma
MySQL AB MySQL 4.0.8
MySQL AB MySQL 4.0.7 -gamma
MySQL AB MySQL 4.0.7
MySQL AB MySQL 4.0.6
MySQL AB MySQL 4.0.5 a
MySQL AB MySQL 4.0.5
MySQL AB MySQL 4.0.4
MySQL AB MySQL 4.0.3
MySQL AB MySQL 4.0.2
MySQL AB MySQL 4.0.1
MySQL AB MySQL 4.0 .0
MySQL AB MySQL 5.0
MySQL AB MySQL 4.1.11a
MySQL AB MySQL 4.1.10a
MySQL AB MySQL 4.1.0.0-alpha
MySQL AB MySQL 4.1.0-0

NOT VULNERABLE:

MySQL AB MySQL 5.1.18
MySQL AB MySQL 5.0.42
MySQL AB MySQL 4.1.23

Vai alla pagina originale su Security Focus

Discussion

MySQL is prone to an access-validation vulnerability because it fails to perform adequate access control.

Attackers can exploit this issue to rename arbitrary tables. This could result in denial-of-service conditions and may aid in other attacks.

Versions of MySQL prior to 4.1.23, 5.0.42, and 5.1.18 are vulnerable.

Exploit

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:vuldb@securityfocus.com.