CVE-2007-3781
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source...
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
Exploit likelihood
What each source reports
NVD Score used
4.0
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
- Record
CVE-2007-3781- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
- Record
CVE-2007-3781- Updated
- 2026-11-02
EUVDEUVD-2007-3765 No score
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
- Record
EUVD-2007-3765- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-494v-q3hh-x3w8 No score
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source...
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
- Record
GHSA-494v-q3hh-x3w8- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:4.0 From an advisory covering 3 CVEs |
before 5.0.32-7etch4, plus listed versions 5.0.32-7etch15.0.32-7etch35.0.32-7etch3~bpo31+1 |
5.0.32-7etch4 |
mysqlRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-benchRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-clusterRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-develRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-libsRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-serverRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysql-testRed Hat:rhel_application_stack:1 From an advisory covering 5 CVEs |
before 0:5.0.44-1.el4s1.1 | 0:5.0.44-1.el4s1.1 |
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3781 is a medium vulnerability (CVSS 4.0) in Mysql Community Server, published July 15, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. No source names a fixed version.
References
bugs.mysql.com/bug.php?id=25578
secunia.com/advisories/28343
osvdb.org/37783
redhat.com/support/errata/RHSA-2007-0894.html
secunia.com/advisories/26073
secunia.com/advisories/26498
Show 73 moreShow less
lists.mysql.com/announce/470
debian.org/security/2008/dsa-1451
securityfocus.com/bid/25017
usn.ubuntu.com/559-1
securityfocus.com/archive/1/473874/100/0/threaded
security.gentoo.org/glsa/glsa-200708-10.xml
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959
secunia.com/advisories/26987
secunia.com/advisories/25301
secunia.com/advisories/28040
issues.rpath.com/browse/RPL-1536
secunia.com/advisories/30351
secunia.com/advisories/28108
dev.mysql.com/doc/refman/5.0/en/releasenotes-cs-5-0-45.html
secunia.com/advisories/26430
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9195
secunia.com/advisories/28128
mandriva.com/security/advisories?name=MDKSA-2007:243
redhat.com/support/errata/RHSA-2008-0364.html
nvd.nist.gov/vuln/detail/CVE-2007-3781
github.com/advisories/GHSA-494v-q3hh-x3w8
access.redhat.com/errata/RHSA-2007:0894
access.redhat.com/security/updates/classification
rhn.redhat.com/errata/RHEA-2007-0842.html
bugzilla.redhat.com/show_bug.cgi?id=241688
bugzilla.redhat.com/show_bug.cgi?id=241689
bugzilla.redhat.com/show_bug.cgi?id=248553
bugzilla.redhat.com/show_bug.cgi?id=254108
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0894.json
access.redhat.com/security/cve/CVE-2007-2691
cve.org/CVERecord?id=CVE-2007-2691
nvd.nist.gov/vuln/detail/CVE-2007-2691
access.redhat.com/security/cve/CVE-2007-2692
cve.org/CVERecord?id=CVE-2007-2692
nvd.nist.gov/vuln/detail/CVE-2007-2692
access.redhat.com/security/cve/CVE-2007-3780
cve.org/CVERecord?id=CVE-2007-3780
nvd.nist.gov/vuln/detail/CVE-2007-3780
access.redhat.com/security/cve/CVE-2007-3781
cve.org/CVERecord?id=CVE-2007-3781
access.redhat.com/security/cve/CVE-2007-3782
cve.org/CVERecord?id=CVE-2007-3782
nvd.nist.gov/vuln/detail/CVE-2007-3782
access.redhat.com/errata/RHSA-2008:0364
bugzilla.redhat.com/show_bug.cgi?id=194613
bugzilla.redhat.com/show_bug.cgi?id=202246
bugzilla.redhat.com/show_bug.cgi?id=216427
bugzilla.redhat.com/show_bug.cgi?id=232603
bugzilla.redhat.com/show_bug.cgi?id=240813
bugzilla.redhat.com/show_bug.cgi?id=254012
bugzilla.redhat.com/show_bug.cgi?id=256501
bugzilla.redhat.com/show_bug.cgi?id=349121
bugzilla.redhat.com/show_bug.cgi?id=434264
bugzilla.redhat.com/show_bug.cgi?id=435391
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0364.json
access.redhat.com/security/cve/CVE-2006-0903
cve.org/CVERecord?id=CVE-2006-0903
nvd.nist.gov/vuln/detail/CVE-2006-0903
access.redhat.com/security/cve/CVE-2006-4031
cve.org/CVERecord?id=CVE-2006-4031
nvd.nist.gov/vuln/detail/CVE-2006-4031
access.redhat.com/security/cve/CVE-2006-4227
cve.org/CVERecord?id=CVE-2006-4227
nvd.nist.gov/vuln/detail/CVE-2006-4227
access.redhat.com/security/cve/CVE-2006-7232
cve.org/CVERecord?id=CVE-2006-7232
nvd.nist.gov/vuln/detail/CVE-2006-7232
access.redhat.com/security/cve/CVE-2007-1420
cve.org/CVERecord?id=CVE-2007-1420
nvd.nist.gov/vuln/detail/CVE-2007-1420
access.redhat.com/security/cve/CVE-2007-2583
cve.org/CVERecord?id=CVE-2007-2583
nvd.nist.gov/vuln/detail/CVE-2007-2583