CVE-2010-2008
Low
Description
MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory.
SeverityLow
CVSS3.5
Exploit probability—
Product
Oracle Mysql
PublishedJul 13, 2010
First seenJul 13, 2010
How to fix
Update
- oracle mysql5.1.48 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle mysql | v < 5.1.48 | 5.1.48 |
| canonical ubuntu_linux | 6.06, 8.04, 9.10, 10.04, 10.10, 11.04, 11.10 | — |
| fedoraproject fedora | 13 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.