Description
MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | mysql-dfsg-5.0 | 5.0.32-7etch3 | DSA-1413-1 |
| Debian 3.1 | mysql-dfsg | 4.0.24-10sarge3 | DSA-1413-1 |
| Debian 3.1 | mysql-dfsg-4.1 | 4.1.11a-4sarge8 | DSA-1413-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | mysql +4 | 5.0.45-7.el5 | RHSA-2008:0364 |
| RHEL 4 | mysql +3 | 4.1.22-2.el4 | RHSA-2008:0768 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | mysql +6 | 5.0.44-1.el4s1.1 | RHSA-2007:0894 |
Advisories 4
- RHSA-2008:0364 Red Hat Security Advisory: mysql security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2008:0768 Red Hat Security Advisory: mysql security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1413-1 mysql - multiple Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2007:0894 Red Hat Security Advisory: mysql security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- http://bugs.mysql.com/bug.php?id=27515
- 27823 third-party-advisory
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html
- RHSA-2007:0894 vendor-advisory
- 26073 third-party-advisory
- 31681 vdb-entry
- 1018069 vdb-entry
- 31226 third-party-advisory
- [announce] 20070712 MySQL Community Server 5.0.45 has been released! mailing-list
- ADV-2007-1804 vdb-entry
- RHSA-2008:0768 vendor-advisory
- mysql-renametable-weak-security(34347) vdb-entry
- 25946 third-party-advisory
- 20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server mailing-list
- 24016 vdb-entry
- 25301 third-party-advisory
- DSA-1413 vendor-advisory
- 34766 vdb-entry
- https://issues.rpath.com/browse/RPL-1536
- 32222 third-party-advisory
- USN-528-1 vendor-advisory
- MDKSA-2007:139 vendor-advisory
- 30351 third-party-advisory
- 27155 third-party-advisory
- 26430 third-party-advisory
- ADV-2008-2780 vdb-entry
- 28838 third-party-advisory
- SUSE-SR:2008:003 vendor-advisory
- RHSA-2008:0364 vendor-advisory
- APPLE-SA-2008-10-09 vendor-advisory
- http://support.apple.com/kb/HT3216
- oval:org.mitre.oval:def:9559 vdb-entry signature