Description
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | mysql-dfsg-5.0 | 5.0.32-7etch4 | DSA-1451-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | mysql +4 | 5.0.45-7.el5 | RHSA-2008:0364 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | mysql +6 | 5.0.44-1.el4s1.1 | RHSA-2007:0894 |
Advisories 3
- RHSA-2008:0364 Red Hat Security Advisory: mysql security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1451-1 mysql-dfsg-5.0 several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2007:0894 Red Hat Security Advisory: mysql security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- http://bugs.mysql.com/bug.php?id=25578
- 28343 third-party-advisory
- 37783 vdb-entry
- RHSA-2007:0894 vendor-advisory
- 26073 third-party-advisory
- 26498 third-party-advisory
- [announce] 20070712 MySQL Community Server 5.0.45 has been released! mailing-list
- DSA-1451 vendor-advisory
- 25017 vdb-entry
- USN-559-1 vendor-advisory
- 20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server mailing-list
- GLSA-200708-10 vendor-advisory
- SSA:2007-348-01 vendor-advisory
- 26987 third-party-advisory
- 25301 third-party-advisory
- 28040 third-party-advisory
- https://issues.rpath.com/browse/RPL-1536
- 30351 third-party-advisory
- 28108 third-party-advisory
- http://dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html
- 26430 third-party-advisory
- oval:org.mitre.oval:def:9195 vdb-entry signature
- 28128 third-party-advisory
- MDKSA-2007:243 vendor-advisory
- RHSA-2008:0364 vendor-advisory