Unscored severity · published May 14, 2010
CVE-2010-1621
The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to…
–
CVSS
1.4%
EPSS
No
On KEV
Description
The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Mysql · Mysql
through 5.1.45 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1621
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1621
bugs.mysql.com
http://bugs.mysql.com/bug.php?id=51770
dev.mysql.com
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-46.html
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2010:093
www.securityfocus.com
http://www.securityfocus.com/bid/39543
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1397-1
More from Mysql
7.8
CVE-2017-15945
The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown…
–
CVE-2015-2575
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via…
–
CVE-2013-1492
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553
–
CVE-2012-0553
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492
–
CVE-2012-0882
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary…