Skip to content
OpenAdvisories
Unscored DSA-1413-1 6 CVEs

mysql - multiple

Published Nov 26, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 3

ReleasePackageFixed in
Debian · 3.1 mysql-dfsg 4.0.24-10sarge3
Debian · 3.1 mysql-dfsg-4.1 4.1.11a-4sarge8
Debian · 4.0 mysql-dfsg-5.0 5.0.32-7etch3

Vulnerabilities 6

  • Unscored —
    CVE-2007-2583 Public exploit EPSS 11%

    The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depe…

  • Unscored —
    CVE-2007-2691

    MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE …

  • Unscored —
    CVE-2007-2692

    The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privi…

  • Unscored —
    CVE-2007-3780 EPSS 14%

    MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malforme…

  • Unscored —
    CVE-2007-3782

    MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another…

  • Unscored —
    CVE-2007-5925 Public exploit EPSS 11%

    The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows…