MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade mysql-serverUpgrade mysql-develUpgrade mysql-testUpgrade mysql-benchUpgrade mysql | Dec 1, 2016 | May 21, 2010 |
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | May 21, 2010 |
| Oracle Mysql | — | Upgrade to Oracle MySQL version 5.1.46 | Aug 29, 2012 | May 21, 2010 |
| Oracle Solaris | — | Upgrade database/mysql-51 to version 5.1.37-0.175.1.10.0.5.0 on Solaris 11.1Upgrade database/mysql-51/library to version 5.1.37-0.175.1.10.0.5.0 on Solaris 11.1Upgrade database/mysql-51/tests to version 5.1.37-0.175.1.10.0.5.0 on Solaris 11.1 | May 29, 2017 | May 21, 2010 |
| Oracle_linux | — | Upgrade mysql-develUpgrade mysql-benchUpgrade mysqlUpgrade mysql-testUpgrade mysql-server | Oct 16, 2024 | May 21, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 22, 2008 |
| Suse | — | Upgrade libmysql55client_r18-x86Upgrade mysql-MaxUpgrade libmysqlclient_r15-x86Upgrade libmysqlclient15-32bitUpgrade mysql-toolsUpgrade libmysql55client_r18Upgrade libmysqlclient15Upgrade libmysql55client18Upgrade mysql-clientUpgrade libmysqlclient_r15Upgrade mysqlUpgrade libmysql55client18-32bitUpgrade libmysqlclient_r15-32bitUpgrade libmysql55client_r18-32bitUpgrade libmysqlclient15-x86Upgrade libmysqlclient-develUpgrade libmysql55client18-x86 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade mysql-server-5.1Upgrade mysql-server-5.0 | Nov 8, 2024 | May 21, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub