MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Community_server | Mysql | 5.0.41 (including) | 5.0.41 (including) |
| Community_server | Mysql | 5.0.44 (including) | 5.0.44 (including) |
| Mysql-dfsg-5.0 | Ubuntu | dapper | * |
| Mysql-dfsg-5.0 | Ubuntu | devel | * |
| Mysql-dfsg-5.0 | Ubuntu | edgy | * |
| Mysql-dfsg-5.0 | Ubuntu | feisty | * |
| Mysql-dfsg-5.0 | Ubuntu | gutsy | * |
| Mysql-dfsg-5.0 | Ubuntu | upstream | * |
| Red Hat Enterprise Linux 5 | RedHat | mysql-0:5.0.45-7.el5 | * |
| Red Hat Web Application Stack for RHEL 4 | RedHat | mysql-0:5.0.44-1.el4s1.1 | * |