3.6

CVE-2010-1626

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.

Data is provided by the National Vulnerability Database (NVD)
Mysql ≫ Mysql Version <= 5.1.45
Mysql ≫ Mysql Version5.0.5.0.21
Mysql ≫ Mysql Version5.0.15
Mysql ≫ Mysql Version5.0.16
Mysql ≫ Mysql Version5.0.17
Mysql ≫ Mysql Version5.0.20
Mysql ≫ Mysql Version5.0.24
Mysql ≫ Mysql Version5.0.45b
Mysql ≫ Mysql Version5.0.82
Mysql ≫ Mysql Version5.0.84
Mysql ≫ Mysql Version5.0.87
Mysql ≫ Mysql Version5.1.5
Mysql ≫ Mysql Version5.1.23
Mysql ≫ Mysql Version5.1.31
Mysql ≫ Mysql Version5.1.32
Mysql ≫ Mysql Version5.1.34
Mysql ≫ Mysql Version5.1.37
Oracle ≫ Mysql Version5.0.18
Oracle ≫ Mysql Version5.0.19
Oracle ≫ Mysql Version5.0.21
Oracle ≫ Mysql Version5.0.22
Oracle ≫ Mysql Version5.0.23
Oracle ≫ Mysql Version5.0.27
Oracle ≫ Mysql Version5.0.33
Oracle ≫ Mysql Version5.0.37
Oracle ≫ Mysql Version5.0.41
Oracle ≫ Mysql Version5.0.45
Oracle ≫ Mysql Version5.0.51
Oracle ≫ Mysql Version5.0.67
Oracle ≫ Mysql Version5.0.75
Oracle ≫ Mysql Version5.0.77
Oracle ≫ Mysql Version5.0.81
Oracle ≫ Mysql Version5.0.83
Oracle ≫ Mysql Version5.0.85
Oracle ≫ Mysql Version5.0.86
Oracle ≫ Mysql Version5.0.88
Oracle ≫ Mysql Version5.0.89
Oracle ≫ Mysql Version5.0.90
Oracle ≫ Mysql Version5.0.91
Oracle ≫ Mysql Version5.1.30
Oracle ≫ Mysql Version5.1.33
Oracle ≫ Mysql Version5.1.35
Oracle ≫ Mysql Version5.1.36
Oracle ≫ Mysql Version5.1.38
Oracle ≫ Mysql Version5.1.39
Oracle ≫ Mysql Version5.1.40
Oracle ≫ Mysql Version5.1.41
Oracle ≫ Mysql Version5.1.42
Oracle ≫ Mysql Version5.1.43
Oracle ≫ Mysql Version5.1.44
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.08% 0.252
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.6 3.9 4.9
AV:L/AC:L/Au:N/C:N/I:P/A:P
CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.