Home Corporate Website Jobs Updated Mailing Lists RSS Blog  Online Shop Advertise
	Software Inspectors   Scan Online   Personal (PSI)   Network (NSI 2.0) Solutions For   Security Professionals   Security Vendors Free Solutions For   Open Communities   Journalists & Media Secunia Advisories   Search   Historic Advisories   Listed By Product   Listed By Vendor   Statistics / Graphs   Secunia Research   Report Vulnerability   About Advisories Virus Information   Chronological List   Last 10 Virus Alerts   About Virus Information Secunia Customers   Customer Area CVE Reference: CVE-2007-6303 NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. Original Page at CVE MITRE: CVE-2007-6303 Description: MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW statement and an ALTER VIEW statement. CVE Status: Candidate References: XF   http://xforce.iss.net/xforce/xfdb/38989 UBUNTU   http://www.ubuntu.com/usn/usn-588-1 SUSE   http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html ST   1019085 SAID   Secunia Advisory: SA28739   Secunia Advisory: SA28025   Secunia Advisory: SA28063   Secunia Advisory: SA28838   Secunia Advisory: SA29443   Secunia Advisory: SA29706 REDHAT   http://www.redhat.com/support/errata/RHSA-2007-1157.html MANDRIVA   http://www.mandriva.com/security/advisories?name=MDVSA-2008:017 GENTOO   http://security.gentoo.org/glsa/glsa-200804-04.xml FEDORA CONFIRM   http://lists.mysql.com/announce/502   http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0040   http://dev.mysql.com/doc/refman/6.0/en/news-6-0-4.html   http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-52.html   http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html   http://bugs.mysql.com/bug.php?id=29908 BUGTRAQ   http://www.securityfocus.com/archive/1/archive/1/487606/100/0/threaded BID   26832 Return to the previous page. Secunia PSI Scan | Patch | Track Free Download Secunia Poll Do you think it's important to read Setup/User Guides for applications for use within your network? Yes, I do it all the time Yes, but I do it rarely No See Results    Most Popular Advisories 1. Apple Safari Cross-Domain Cookie Injection Vulnerability 2. YouTube Blog Multiple Vulnerabilities 3. Moodle Script Insertion and Cross-Site Request Forgery 4. IPCop update for various packages 5. dnsmasq Denial of Service and DNS Cache Poisoning 6. SocialEngine SQL Injection and Code Execution 7. Geeklog Forum Plugin Search Cross-Site Scripting Vulnerability 8. Claroline Multiple Cross-Site Scripting Vulnerabilities 9. SUSE update for kernel 10. Asterisk Two Denial of Service Vulnerabilities
Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia