CVE ID:	CVE-2007-2691
Description:	MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.
Test IDs:	1.3.6.1.4.1.25623.1.0.59638   1.3.6.1.4.1.25623.1.0.63171
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2691 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html BugTraq ID: 24016 http://www.securityfocus.com/bid/24016 BugTraq ID: 31681 http://www.securityfocus.com/bid/31681 Bugtraq: 20070717 rPSA-2007-0143-1 mysql mysql-bench mysql-server (Google Search) http://www.securityfocus.com/archive/1/473874/100/0/threaded Debian Security Information: DSA-1413 (Google Search) http://www.debian.org/security/2007/dsa-1413 http://www.mandriva.com/security/advisories?name=MDKSA-2007:139 http://bugs.mysql.com/bug.php?id=27515 http://lists.mysql.com/announce/470 http://osvdb.org/34766 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9559 RedHat Security Advisories: RHSA-2007:0894 http://www.redhat.com/support/errata/RHSA-2007-0894.html RedHat Security Advisories: RHSA-2008:0364 http://www.redhat.com/support/errata/RHSA-2008-0364.html RedHat Security Advisories: RHSA-2008:0768 http://www.redhat.com/support/errata/RHSA-2008-0768.html http://www.securitytracker.com/id?1018069 http://secunia.com/advisories/25301 http://secunia.com/advisories/25946 http://secunia.com/advisories/26073 http://secunia.com/advisories/26430 http://secunia.com/advisories/27155 http://secunia.com/advisories/27823 http://secunia.com/advisories/28838 http://secunia.com/advisories/30351 http://secunia.com/advisories/31226 http://secunia.com/advisories/32222 SuSE Security Announcement: SUSE-SR:2008:003 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html https://usn.ubuntu.com/528-1/ http://www.vupen.com/english/advisories/2007/1804 http://www.vupen.com/english/advisories/2008/2780 XForce ISS Database: mysql-renametable-weak-security(34347) https://exchange.xforce.ibmcloud.com/vulnerabilities/34347