Description
MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement.
References
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-18.html
- 1018071 vdb-entry
- ADV-2007-1804 vdb-entry
- http://bugs.mysql.com/bug.php?id=23675
- mysql-alter-information-disclosure(34349) vdb-entry
- 25301 third-party-advisory
- 24008 vdb-entry