CVE-2010-1621: Medium severity MySQL mysql vulnerability
The mysqluninstallplugin function in sql/sqlplugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1621?
CVE-2010-1621 has a high severity rating due to the potential for unauthorized plugin uninstallation by remote attackers.
How do I fix CVE-2010-1621?
To fix CVE-2010-1621, upgrade MySQL to version 5.1.46 or later, which includes the necessary privilege checks.
What is the impact of CVE-2010-1621?
The impact of CVE-2010-1621 allows remote attackers to remove critical plugins, potentially resulting in service disruption.
Which versions of MySQL are affected by CVE-2010-1621?
CVE-2010-1621 affects MySQL versions up to and including 5.1.45.
What components are vulnerable in CVE-2010-1621?
The vulnerable component in CVE-2010-1621 is the mysql_uninstall_plugin function in sql/sql_plugin.cc.