CVE-2007-3782 (GCVE-0-2007-3782)

Vulnerability from cvelistv5 – Published: 2007-07-15 22:00 – Updated: 2024-08-07 14:28
VLAI
Summary
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table.
Severity
No CVSS data available.
CWE
  • n/a
References
URL Tags
http://secunia.com/advisories/26710 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27823 third-party-advisoryx_refsource_SECUNIA
http://bugs.mysql.com/bug.php?id=27878 x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2007-08… vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26073 third-party-advisoryx_refsource_SECUNIA
http://lists.mysql.com/announce/470 mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/25017 vdb-entryx_refsource_BID
http://securitytracker.com/id?1018663 vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/473874/100… mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/26987 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/25301 third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2007/dsa-1413 vendor-advisoryx_refsource_DEBIAN
https://issues.rpath.com/browse/RPL-1536 x_refsource_CONFIRM
https://usn.ubuntu.com/528-1/ vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/30351 third-party-advisoryx_refsource_SECUNIA
http://dev.mysql.com/doc/refman/5.0/en/releasenot… x_refsource_CONFIRM
http://secunia.com/advisories/27155 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26430 third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def… vdb-entrysignaturex_refsource_OVAL
http://www.redhat.com/support/errata/RHSA-2008-03… vendor-advisoryx_refsource_REDHAT
Date Public
2007-07-04 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:28:52.431Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "26710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26710"
          },
          {
            "name": "27823",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27823"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.mysql.com/bug.php?id=27878"
          },
          {
            "name": "MDKSA-2007:177",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
          },
          {
            "name": "SUSE-SR:2007:019",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
          },
          {
            "name": "RHSA-2007:0894",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
          },
          {
            "name": "26073",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26073"
          },
          {
            "name": "[announce] 20070712 MySQL Community Server 5.0.45 has been released!",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.mysql.com/announce/470"
          },
          {
            "name": "25017",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25017"
          },
          {
            "name": "1018663",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1018663"
          },
          {
            "name": "20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
          },
          {
            "name": "26987",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26987"
          },
          {
            "name": "25301",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25301"
          },
          {
            "name": "DSA-1413",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1413"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-1536"
          },
          {
            "name": "USN-528-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/528-1/"
          },
          {
            "name": "30351",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30351"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
          },
          {
            "name": "27155",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27155"
          },
          {
            "name": "26430",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26430"
          },
          {
            "name": "oval:org.mitre.oval:def:10563",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563"
          },
          {
            "name": "RHSA-2008:0364",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-15T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "26710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26710"
        },
        {
          "name": "27823",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27823"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.mysql.com/bug.php?id=27878"
        },
        {
          "name": "MDKSA-2007:177",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
        },
        {
          "name": "SUSE-SR:2007:019",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
        },
        {
          "name": "RHSA-2007:0894",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
        },
        {
          "name": "26073",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26073"
        },
        {
          "name": "[announce] 20070712 MySQL Community Server 5.0.45 has been released!",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.mysql.com/announce/470"
        },
        {
          "name": "25017",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25017"
        },
        {
          "name": "1018663",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1018663"
        },
        {
          "name": "20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
        },
        {
          "name": "26987",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26987"
        },
        {
          "name": "25301",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25301"
        },
        {
          "name": "DSA-1413",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1413"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-1536"
        },
        {
          "name": "USN-528-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/528-1/"
        },
        {
          "name": "30351",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30351"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
        },
        {
          "name": "27155",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27155"
        },
        {
          "name": "26430",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26430"
        },
        {
          "name": "oval:org.mitre.oval:def:10563",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563"
        },
        {
          "name": "RHSA-2008:0364",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3782",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "26710",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26710"
            },
            {
              "name": "27823",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27823"
            },
            {
              "name": "http://bugs.mysql.com/bug.php?id=27878",
              "refsource": "CONFIRM",
              "url": "http://bugs.mysql.com/bug.php?id=27878"
            },
            {
              "name": "MDKSA-2007:177",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
            },
            {
              "name": "SUSE-SR:2007:019",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
            },
            {
              "name": "RHSA-2007:0894",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
            },
            {
              "name": "26073",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26073"
            },
            {
              "name": "[announce] 20070712 MySQL Community Server 5.0.45 has been released!",
              "refsource": "MLIST",
              "url": "http://lists.mysql.com/announce/470"
            },
            {
              "name": "25017",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25017"
            },
            {
              "name": "1018663",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1018663"
            },
            {
              "name": "20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
            },
            {
              "name": "26987",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26987"
            },
            {
              "name": "25301",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25301"
            },
            {
              "name": "DSA-1413",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1413"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-1536",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-1536"
            },
            {
              "name": "USN-528-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/528-1/"
            },
            {
              "name": "30351",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30351"
            },
            {
              "name": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html",
              "refsource": "CONFIRM",
              "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
            },
            {
              "name": "27155",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27155"
            },
            {
              "name": "26430",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26430"
            },
            {
              "name": "oval:org.mitre.oval:def:10563",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563"
            },
            {
              "name": "RHSA-2008:0364",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3782",
    "datePublished": "2007-07-15T22:00:00.000Z",
    "dateReserved": "2007-07-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:28:52.431Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-3782",
      "date": "2026-09-25",
      "epss": "0.01567",
      "percentile": "0.74271"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:mysql:community_server:5.0.41:*:*:*:*:*:*:*",
                  "matchCriteriaId": "5FAA5C79-6D2D-45BF-A392-0EA4F9D3C727",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mysql:community_server:5.0.44:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9E670333-0E50-42D5-8D67-B1F565FFD59A",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table."
        },
        {
          "lang": "es",
          "value": "MySQL Community Server anterior a 5.0.45 permite a usuarios autenticados remotamente obtener privilegios de actualizaci\u00f3n (update) para una tabla en otra base de datos mediante una vista que se refiere a esta tabla externa."
        }
      ],
      "id": "CVE-2007-3782",
      "lastModified": "2024-11-21T00:34:03.223",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "LOW",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "SINGLE",
              "availabilityImpact": "NONE",
              "baseScore": 3.5,
              "confidentialityImpact": "NONE",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
              "version": "2.0"
            },
            "exploitabilityScore": 6.8,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2007-07-15T22:30:00.000",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "http://bugs.mysql.com/bug.php?id=27878"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://lists.mysql.com/announce/470"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/25301"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/26073"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/26430"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/26710"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/26987"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/27155"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/27823"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/30351"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://securitytracker.com/id?1018663"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.debian.org/security/2007/dsa-1413"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.securityfocus.com/bid/25017"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://issues.rpath.com/browse/RPL-1536"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://usn.ubuntu.com/528-1/"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugs.mysql.com/bug.php?id=27878"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.mysql.com/announce/470"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/25301"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26073"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26430"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26710"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/26987"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27155"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27823"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/30351"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securitytracker.com/id?1018663"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2007/dsa-1413"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/25017"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://issues.rpath.com/browse/RPL-1536"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://usn.ubuntu.com/528-1/"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vendorComments": [
        {
          "comment": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248553\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.",
          "lastModified": "2007-07-17T00:00:00",
          "organization": "Red Hat"
        }
      ],
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-264"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mysql:community_server:5.0.41:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5FAA5C79-6D2D-45BF-A392-0EA4F9D3C727",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mysql:community_server:5.0.44:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9E670333-0E50-42D5-8D67-B1F565FFD59A",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table."
          },
          {
            "lang": "es",
            "value": "MySQL Community Server anterior a 5.0.45 permite a usuarios autenticados remotamente obtener privilegios de actualizaci\u00f3n (update) para una tabla en otra base de datos mediante una vista que se refiere a esta tabla externa."
          }
        ],
        "id": "CVE-2007-3782",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "NONE",
                "baseScore": 3.5,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
                "version": "2.0"
              },
              "exploitabilityScore": 6.8,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-07-15T22:30:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.mysql.com/bug.php?id=27878"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.mysql.com/announce/470"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/25301"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26073"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26430"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26710"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/26987"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/27155"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/27823"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/30351"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1018663"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2007/dsa-1413"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/25017"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://issues.rpath.com/browse/RPL-1536"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://usn.ubuntu.com/528-1/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.mysql.com/bug.php?id=27878"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.mysql.com/announce/470"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/25301"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26073"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26430"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26710"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/26987"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27155"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27823"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/30351"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1018663"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2007/dsa-1413"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:177"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2007_19_sr.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2007-0894.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0364.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/473874/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/25017"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://issues.rpath.com/browse/RPL-1536"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10563"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://usn.ubuntu.com/528-1/"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vendorComments": [
          {
            "comment": "Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248553\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.",
            "lastModified": "2007-07-17T00:00:00",
            "organization": "Red Hat"
          }
        ],
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-264"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:19:21+00:00",
      "cve": "CVE-2007-3782",
      "id": "CVE-2007-3782",
      "initial_release_date": "2007-07-04T00:00:00+00:00",
      "product_status:fixed": "146",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "New release of MySQL fixes security bugs",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-3782.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2023-12-09T03:40:28Z",
      "cve": "CVE-2007-3782",
      "id": "CVE-2007-3782",
      "initial_release_date": "2023-02-15T06:11:26Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-3782",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-3782.json",
      "version": "4"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…