Skip to content
OpenAdvisories
Unscored RHSA-2007:0894 5 CVEs

Red Hat Security Advisory: mysql security update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 mysql 0:5.0.44-1.el4s1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 mysql-bench 0:5.0.44-1.el4s1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 mysql-cluster 0:5.0.44-1.el4s1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 mysql-debuginfo 0:5.0.44-1.el4s1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 mysql-devel 0:5.0.44-1.el4s1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 mysql-libs 0:5.0.44-1.el4s1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 mysql-server 0:5.0.44-1.el4s1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 mysql-test 0:5.0.44-1.el4s1.1

Vulnerabilities 5

  • Unscored —
    CVE-2007-2691

    MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE …

  • Unscored —
    CVE-2007-2692

    The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privi…

  • Unscored —
    CVE-2007-3780 EPSS 14%

    MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malforme…

  • Unscored —
    CVE-2007-3781

    MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE …

  • Unscored —
    CVE-2007-3782

    MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://rhn.redhat.com/errata/RHEA-2007-0842.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=241688
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=241689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=248553
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=254108
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0894.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-2691
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2691
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2691
  • report
    https://access.redhat.com/security/cve/CVE-2007-2692
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-2692
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-2692
  • report
    https://access.redhat.com/security/cve/CVE-2007-3780
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3780
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3780
  • report
    https://access.redhat.com/security/cve/CVE-2007-3781
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3781
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3781
  • report
    https://access.redhat.com/security/cve/CVE-2007-3782
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3782
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3782