CVE-2006-7217

Currently unrated

Key Information:

Vendor
Apache
Status
Derby
Vendor
CVE Published:
5 July 2007

Summary

Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

References

http://www.novell.com/linux/security/advisories/suse_secu...
vendor-advisoryx_refsource_SUSE
http://db.apache.org/derby/releases/release-10.2.1.6.html
x_refsource_CONFIRM
http://issues.apache.org/jira/browse/DERBY-1858
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.