The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade dev-db/mysql. | Oct 30, 2017 | May 14, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 5, 2010 |
| Suse | — | Upgrade libmysqlclient16Upgrade mysql-ndb-toolsUpgrade mysql-toolsUpgrade mysqlUpgrade mysql-clientUpgrade libmysqlclient16-32bitUpgrade mysql-testUpgrade mysql-benchUpgrade mysql-ndb-storageUpgrade libmysqlclient-develUpgrade mysql-debugUpgrade libmysqlclient_r16-32bitUpgrade mysql-ndb-managementUpgrade libmysqlclient_r16Upgrade libmysqld-develUpgrade mysql-ndb-extra | Dec 12, 2013 | May 14, 2010 |
| Ubuntu | — | Upgrade mysql-server-5.1Upgrade mysql-server-5.0 | Nov 8, 2024 | May 14, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub