MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.

The version of MySQL installed on the remote host reportedly is affected by three issues :

- A user can rename a table without having DROP privileges.

-If a stored routine is declared as 'SQL SECURITY INVOKER', a user may be able to gain privileges by invoking that routine.

-A user with only ALTER privileges on a partitioned table can discover information about the table that should require SELECT privileges.

The version of MySQL installed on the remote host reportedly is affected by several issues :

  - Evaluation of an 'IN()' predicate with a decimal-valued     argument causes a service crash.

  - A user can rename a table even though he does not have     DROP privileges.

  - If a stored routine is declared as 'SQL SECURITY INVOKER',     a user may be able to gain privileges by invoking that     routine.

  - A user with only ALTER privileges on a partitioned table     can discover information about the table that should     require SELECT privileges.

ID	Name	Product	Family	Severity
3993	Oracle MySQL < 5.1.18 Multiple Vulnerabilities	Nessus Network Monitor	Database	medium
25242	MySQL 5.1 < 5.1.18 Multiple Vulnerabilities	Nessus	Databases	medium
801164	MySQL < 5.1.18 Multiple Vulnerabilities	Log Correlation Engine	Database	medium

Detections

Analytics

CVE-2007-2693

medium

Tenable Plugins

medium

medium

medium