CVEvulnerability

CVE-2006-7217

4.0 MEDIUM Published 2007-07-05 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-07-05
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N

Description

Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

Affected configurations

• apache derby 10.1.1.0 • apache derby 10.1.2.1 • apache derby 10.1.3.1

References

http://db.apache.org/derby/releases/release-10.2.1.6.html Patch
http://issues.apache.org/jira/browse/DERBY-1858 issues.apache.org
http://secunia.com/advisories/28636 secunia.com
http://www.novell.com/linux/security/advisories/suse_security_summary_report.html www.novell.com
http://db.apache.org/derby/releases/release-10.2.1.6.html Patch
http://issues.apache.org/jira/browse/DERBY-1858 issues.apache.org
http://secunia.com/advisories/28636 secunia.com
http://www.novell.com/linux/security/advisories/suse_security_summary_report.html www.novell.com