CVE-2007-2691

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.

• http://bugs.mysql.com/bug.php?id=27515Vendor Advisory
• http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.htmlPatch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlMailing List, Third Party Advisory
• http://lists.mysql.com/announce/470Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.htmlThird Party Advisory
• http://osvdb.org/34766Broken Link
• http://secunia.com/advisories/25301Third Party Advisory
• http://secunia.com/advisories/25946Third Party Advisory
• http://secunia.com/advisories/26073Third Party Advisory
• http://secunia.com/advisories/26430Third Party Advisory
• http://secunia.com/advisories/27155Third Party Advisory
• http://secunia.com/advisories/27823Third Party Advisory
• http://secunia.com/advisories/28838Third Party Advisory
• http://secunia.com/advisories/30351Third Party Advisory
• http://secunia.com/advisories/31226Third Party Advisory
• http://secunia.com/advisories/32222Third Party Advisory
• http://support.apple.com/kb/HT3216Third Party Advisory
• http://www.debian.org/security/2007/dsa-1413Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:139Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2007-0894.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0364.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0768.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/473874/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/24016Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/31681Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1018069Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/1804Third Party Advisory
• http://www.vupen.com/english/advisories/2008/2780Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34347Third Party Advisory, VDB Entry
• https://issues.rpath.com/browse/RPL-1536Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559Third Party Advisory
• https://usn.ubuntu.com/528-1/Third Party Advisory
• http://bugs.mysql.com/bug.php?id=27515Vendor Advisory
• http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.htmlPatch, Vendor Advisory
• http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlMailing List, Third Party Advisory
• http://lists.mysql.com/announce/470Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.htmlThird Party Advisory
• http://osvdb.org/34766Broken Link
• http://secunia.com/advisories/25301Third Party Advisory
• http://secunia.com/advisories/25946Third Party Advisory
• http://secunia.com/advisories/26073Third Party Advisory
• http://secunia.com/advisories/26430Third Party Advisory
• http://secunia.com/advisories/27155Third Party Advisory
• http://secunia.com/advisories/27823Third Party Advisory
• http://secunia.com/advisories/28838Third Party Advisory
• http://secunia.com/advisories/30351Third Party Advisory
• http://secunia.com/advisories/31226Third Party Advisory
• http://secunia.com/advisories/32222Third Party Advisory
• http://support.apple.com/kb/HT3216Third Party Advisory
• http://www.debian.org/security/2007/dsa-1413Third Party Advisory
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:139Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2007-0894.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0364.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2008-0768.htmlThird Party Advisory
• http://www.securityfocus.com/archive/1/473874/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/24016Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/31681Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1018069Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/1804Third Party Advisory
• http://www.vupen.com/english/advisories/2008/2780Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34347Third Party Advisory, VDB Entry
• https://issues.rpath.com/browse/RPL-1536Broken Link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559Third Party Advisory
• https://usn.ubuntu.com/528-1/Third Party Advisory

Published

May 16, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2685Multiple SQL injection vulnerabilities in index.php in Jetbo…
• CVE-2007-2686Cross-site scripting (XSS) vulnerability in index.php in Jet…
• CVE-2007-2687Stack-based buffer overflow in the MicroWorld Agent service …
• CVE-2007-2688The Cisco Intrusion Prevention System (IPS) and IOS with Fir…
• CVE-2007-2689Check Point Web Intelligence does not properly handle certai…
• CVE-2007-2690Multiple IBM ISS Proventia Series products, including the A,…
• CVE-2007-2692The mysql_change_db function in MySQL 5.0.x before 5.0.40 an…
• CVE-2007-2693MySQL before 5.1.18 allows remote authenticated users withou…
• CVE-2007-2694Multiple cross-site scripting (XSS) vulnerabilities in BEA W…
• CVE-2007-2695The HttpClusterServlet and HttpProxyServlet in BEA WebLogic …
• CVE-2007-2696The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 t…
• CVE-2007-2697The embedded LDAP server in BEA WebLogic Express and WebLogi…