CVE-2010-4177: Medium severity Oracle Mysql-gui-tools vulnerability
Published Nov 30, 2010
·Updated
mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes.
Affected Software
3 affected components
debian/mysql-gui-tools
Oracle Mysql-gui-tools<5.0r14\+opensuse-2.3
Fedoraproject Fedora=12
Event History
Nov 30, 2010
Data Sourced
11:54 PM
SeverityAffected Software
Nov 12, 2019
CVE Published
via MITRE·10:23 PM
Data Sourced
via MITRE·10:23 PM
DescriptionWeakness
Feb 17, 2026
Data Sourced
via Debian·10:26 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4177?
CVE-2010-4177 has a medium severity rating due to the exposure of user passwords in clear text.
2
How do I fix CVE-2010-4177?
To fix CVE-2010-4177, update to version 5.0r14+openSUSE-2.3 or later.
3
What software is affected by CVE-2010-4177?
CVE-2010-4177 affects mysql-gui-tools including mysql-query-browser and mysql-admin before version 5.0r14+openSUSE-2.3.
4
What is the impact of CVE-2010-4177?
The impact of CVE-2010-4177 is the unauthorized disclosure of MySQL user passwords to other users on the system.
5
How can I mitigate CVE-2010-4177 if I cannot update?
If you cannot update to a patched version for CVE-2010-4177, consider restricting access to the system and processes to trusted users only.