Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Mysql | — | Apply OS X security update 2010-007Upgrade macOS to the latest version | Dec 16, 2011 | Jun 7, 2010 |
| Centos_linux | — | Upgrade mysql-develUpgrade mysql-serverUpgrade mysql-benchUpgrade mysql-testUpgrade mysql | Dec 1, 2016 | Jun 7, 2010 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | Jun 7, 2010 |
| Oracle_linux | — | Upgrade mysqlUpgrade mysql-benchUpgrade mysql-testUpgrade mysql-develUpgrade mysql-server | Oct 16, 2024 | Jun 7, 2010 |
| Redhat_linux | — | — | Jul 9, 2025 | May 13, 2010 |
| Suse | — | Upgrade libmysql55client18-x86Upgrade libmysqlclient-develUpgrade libmysql55client_r18-32bitUpgrade libmysqlclient_r15Upgrade mysqlUpgrade libmysqlclient15-x86Upgrade libmysql55client18-32bitUpgrade libmysql55client18Upgrade mysql-toolsUpgrade libmysqlclient_r15-x86Upgrade libmysqlclient_r15-32bitUpgrade libmysqlclient15-32bitUpgrade libmysqlclient15Upgrade libmysql55client_r18Upgrade mysql-MaxUpgrade mysql-clientUpgrade libmysql55client_r18-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.1Upgrade mysql-server-5.0 | Nov 8, 2024 | Jun 8, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub