Lucene search

[email protected]CVE-2010-1626

HistoryMay 21, 2010 - 5:30 p.m.

CVE-2010-1626

2010-05-2117:30:01

CWE-59

CWE-264

[email protected]

web.nvd.nist.gov

151

mysql

security

symlink attack

vulnerability

cve-2010-1626

nvd

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

6.2 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.2%

JSON

MySQL before 5.1.46 allows local users to delete the data and index files of another user’s MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.

Affected configurations

NVD

Node

mysqlmysqlRange≤5.1.45

mysqlmysqlMatch5.0.5.0.21

mysqlmysqlMatch5.0.15

mysqlmysqlMatch5.0.16

mysqlmysqlMatch5.0.17

mysqlmysqlMatch5.0.20

mysqlmysqlMatch5.0.24

mysqlmysqlMatch5.0.45b

mysqlmysqlMatch5.0.82

mysqlmysqlMatch5.0.84

mysqlmysqlMatch5.0.87

mysqlmysqlMatch5.1.5

mysqlmysqlMatch5.1.23

mysqlmysqlMatch5.1.31

mysqlmysqlMatch5.1.32

mysqlmysqlMatch5.1.34

mysqlmysqlMatch5.1.37

oraclemysqlMatch5.0.18

oraclemysqlMatch5.0.19

oraclemysqlMatch5.0.21

oraclemysqlMatch5.0.22

oraclemysqlMatch5.0.23

oraclemysqlMatch5.0.27

oraclemysqlMatch5.0.33

oraclemysqlMatch5.0.37

oraclemysqlMatch5.0.41

oraclemysqlMatch5.0.45

oraclemysqlMatch5.0.51

oraclemysqlMatch5.0.67

oraclemysqlMatch5.0.75

oraclemysqlMatch5.0.77

oraclemysqlMatch5.0.81

oraclemysqlMatch5.0.83

oraclemysqlMatch5.0.85

oraclemysqlMatch5.0.86

oraclemysqlMatch5.0.88

oraclemysqlMatch5.0.89

oraclemysqlMatch5.0.90

oraclemysqlMatch5.0.91

oraclemysqlMatch5.1.30

oraclemysqlMatch5.1.33

oraclemysqlMatch5.1.35

oraclemysqlMatch5.1.36

oraclemysqlMatch5.1.38

oraclemysqlMatch5.1.39

oraclemysqlMatch5.1.40

oraclemysqlMatch5.1.41

oraclemysqlMatch5.1.42

oraclemysqlMatch5.1.43

oraclemysqlMatch5.1.44

CPENameOperatorVersion
mysql:mysqlmysqlle5.1.45
mysql:mysqlmysqleq5.0.5.0.21
mysql:mysqlmysqleq5.0.15
mysql:mysqlmysqleq5.0.16
mysql:mysqlmysqleq5.0.17
mysql:mysqlmysqleq5.0.20
mysql:mysqlmysqleq5.0.24
mysql:mysqlmysqleq5.0.45b
mysql:mysqlmysqleq5.0.82
mysql:mysqlmysqleq5.0.84

CPE	Name	Operator	Version
mysql:mysql	mysql	le	5.1.45
mysql:mysql	mysql	eq	5.0.5.0.21
mysql:mysql	mysql	eq	5.0.15
mysql:mysql	mysql	eq	5.0.16
mysql:mysql	mysql	eq	5.0.17
mysql:mysql	mysql	eq	5.0.20
mysql:mysql	mysql	eq	5.0.24
mysql:mysql	mysql	eq	5.0.45b
mysql:mysql	mysql	eq	5.0.82
mysql:mysql	mysql	eq	5.0.84