First published: Fri May 21 2010(Updated: )
MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL Server | <=5.1.45 | |
MySQL Server | =5.1.23 | |
MySQL Server | =5.0.84 | |
MySQL Server | =5.0.15 | |
MySQL Server | =5.1.34 | |
MySQL Server | =5.0.17 | |
MySQL Server | =5.0.5.0.21 | |
MySQL Server | =5.0.24 | |
MySQL Server | =5.0.87 | |
MySQL Server | =5.1.37 | |
MySQL Server | =5.0.20 | |
MySQL Server | =5.1.31 | |
MySQL Server | =5.0.82 | |
MySQL Server | =5.1.32 | |
MySQL Server | =5.0.16 | |
MySQL Server | =5.0.45b | |
MySQL Server | =5.1.5 | |
MySQL | =5.1.39 | |
MySQL | =5.1.40 | |
MySQL | =5.1.41 | |
MySQL | =5.1.42 | |
MySQL | =5.1.43 | |
MySQL | =5.1.44 | |
MySQL | =5.0.51 | |
MySQL | =5.0.18 | |
MySQL | =5.0.19 | |
MySQL | =5.0.21 | |
MySQL | =5.0.22 | |
MySQL | =5.0.23 | |
MySQL | =5.0.27 | |
MySQL | =5.0.33 | |
MySQL | =5.0.37 | |
MySQL | =5.0.41 | |
MySQL | =5.0.45 | |
MySQL | =5.0.67 | |
MySQL | =5.0.75 | |
MySQL | =5.0.77 | |
MySQL | =5.0.81 | |
MySQL | =5.1.30 | |
MySQL | =5.1.33 | |
MySQL | =5.1.35 | |
MySQL | =5.1.36 | |
MySQL | =5.1.38 | |
MySQL | =5.0.83 | |
MySQL | =5.0.85 | |
MySQL | =5.0.86 | |
MySQL | =5.0.88 | |
MySQL | =5.0.89 | |
MySQL | =5.0.90 | |
MySQL | =5.0.91 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-1626 has been classified with a medium severity due to its potential for data loss through a symlink attack.
To fix CVE-2010-1626, upgrade your MySQL installation to version 5.1.46 or later.
CVE-2010-1626 affects users of MySQL version 5.1.45 and earlier, as well as several 5.0 versions.
CVE-2010-1626 can allow local users to delete another user's MyISAM table data and index files, leading to potential data loss.
CVE-2010-1626 is a local vulnerability, requiring access to the MySQL server to exploit.