CVE catalog
CVE-2007-2692
mysql - multiple
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 1.88% · Oct 25, 2026
The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges. mysql SECURITY INVOKER functions do not drop privileges This issue did not affect mysql packages as shipped in Red Hat Enterprise Linux 2.1, 3 and 4.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | mysql-dfsg-5.0 | 4.0 | 5.0.32-7etch1 | vulnerable |
| Debian | mysql-dfsg-5.0 | 4.0 | 5.0.32-7etch3~bpo31+1 | vulnerable |
| Debian | mysql-dfsg-5.0 | 4.0 | 5.0.32-7etch3 | fixed |
| Debian | mysql-dfsg | 3.1 | 4.0.24-10 | vulnerable |
| Debian | mysql-dfsg | 3.1 | 4.0.24-10sarge1 | vulnerable |
| Debian | mysql-dfsg | 3.1 | 4.0.24-10sarge2 | vulnerable |
| Debian | mysql-dfsg | 3.1 | 4.0.24-10sarge3 | fixed |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge1 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge2 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge3 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge4 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge5 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge7 | vulnerable |
| Debian | mysql-dfsg-4.1 | 3.1 | 4.1.11a-4sarge8 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | mysql-dfsg-5.0 | deb | 4.0 | 5.0.32-7etch3 | Not reported | DSA-1413-1 | Not reported |
| Debian | mysql-dfsg | deb | 3.1 | 4.0.24-10sarge3 | Not reported | DSA-1413-1 | Not reported |
| Debian | mysql-dfsg-4.1 | deb | 3.1 | 4.1.11a-4sarge8 | Not reported | DSA-1413-1 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: