Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 01:15
Type | Values Removed | Values Added |
---|---|---|
References | () http://bugs.mysql.com/bug.php?id=53371 - | |
References | () http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html - | |
References | () http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html - | |
References | () http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - | |
References | () http://lists.mysql.com/commits/107532 - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html - | |
References | () http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html - | |
References | () http://securitytracker.com/id?1024031 - | |
References | () http://support.apple.com/kb/HT4435 - | |
References | () http://www.mandriva.com/security/advisories?name=MDVSA-2010:107 - | |
References | () http://www.redhat.com/support/errata/RHSA-2010-0442.html - | |
References | () http://www.redhat.com/support/errata/RHSA-2010-0824.html - | |
References | () http://www.ubuntu.com/usn/USN-1397-1 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10258 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7210 - |
Information
Published : 2010-06-08 00:30
Updated : 2024-11-21 01:15
NVD link : CVE-2010-1848
Mitre link : CVE-2010-1848
CVE.ORG link : CVE-2010-1848
JSON object : View
Products Affected
mysql
- mysql
oracle
- mysql
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')