CVE-2007-2691: Canonical Ubuntu Linux

Medium severity, CVSS 4.9. EPSS: 2.8% chance of exploitation in the next 30 days.

MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to rename arbitrary tables.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only
• Debian Debian Linux: version 3.1 only; version 4.0 only
• MySQL MySQL: up to and including 4.1.22; from 5.0, before 5.0.42 (fixed in 5.0.42); from 5.1, before 5.1.18 (fixed in 5.1.18)

Published 2007-05-16. Last modified 2026-06-16.