Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MySQL Rename Table函数访问验证漏洞
Vulnerability Description
Oracle MySQL是美国甲骨文(Oracle)公司的一套开源的关系数据库管理系统。该数据库系统具有性能高、成本低、可靠性好等特点。 MySQL的Rename Table功能的实现上存在访问验证漏洞,能够以合法帐号登录到攻击者可能利用此漏洞执行非授权的操作。 MySQL没有对RENAME TABLE语句要求DROP权限,这允许通过认证的远程用户重新命名任意表格。
CVSS Information
N/A
Vulnerability Type
N/A