3.6
CVSSv2

CVE-2010-1626

Published: 21/05/2010 Updated: 17/12/2019
CVSS v2 Base Score: 3.6 | Impact Score: 4.9 | Exploitability Score: 3.9
VMScore: 322
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P

Vulnerability Summary

MySQL prior to 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.

Vulnerable Product Search on Vulmon Subscribe to Product

oracle mysql 5.1.44

oracle mysql 5.1.43

oracle mysql 5.1.36

oracle mysql 5.1.35

mysql mysql 5.1.5

oracle mysql 5.0.91

mysql mysql 5.0.84

oracle mysql 5.0.83

oracle mysql 5.0.45

oracle mysql 5.0.22

oracle mysql 5.0.21

mysql mysql 5.0.16

oracle mysql 5.1.38

mysql mysql 5.1.37

oracle mysql 5.1.30

mysql mysql 5.1.23

oracle mysql 5.0.86

oracle mysql 5.0.85

oracle mysql 5.0.67

oracle mysql 5.0.51

mysql mysql 5.0.24

oracle mysql 5.0.23

mysql mysql 5.0.17

mysql mysql 5.0.45b

mysql mysql

oracle mysql 5.1.40

oracle mysql 5.1.39

mysql mysql 5.1.32

mysql mysql 5.1.31

oracle mysql 5.0.88

mysql mysql 5.0.87

oracle mysql 5.0.77

oracle mysql 5.0.75

oracle mysql 5.0.33

oracle mysql 5.0.27

oracle mysql 5.0.19

oracle mysql 5.0.18

mysql mysql 5.0.5.0.21

oracle mysql 5.1.42

oracle mysql 5.1.41

mysql mysql 5.1.34

oracle mysql 5.1.33

oracle mysql 5.0.90

oracle mysql 5.0.89

mysql mysql 5.0.82

oracle mysql 5.0.81

oracle mysql 5.0.41

oracle mysql 5.0.37

mysql mysql 5.0.20

mysql mysql 5.0.15

Vendor Advisories

Several vulnerabilities have been discovered in the MySQL database server The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-1626 MySQL allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command CVE-2010-1848 MySQL ...
It was discovered that MySQL did not check privileges before uninstalling plugins An authenticated user could uninstall arbitrary plugins, bypassing intended restrictions This issue only affected Ubuntu 910 and 1004 LTS (CVE-2010-1621) ...