CVE-2010-1848
08.06.2010, 00:30
Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.
| Vendor | Product | Version |
|---|---|---|
| mysql | mysql | 5.0.0 |
| mysql | mysql | 5.0.1 |
| mysql | mysql | 5.0.2 |
| mysql | mysql | 5.0.3 |
| mysql | mysql | 5.0.4 |
| mysql | mysql | 5.0.5 |
| mysql | mysql | 5.0.5.0.21 |
| mysql | mysql | 5.0.10 |
| mysql | mysql | 5.0.15 |
| mysql | mysql | 5.0.16 |
| mysql | mysql | 5.0.17 |
| mysql | mysql | 5.0.20 |
| mysql | mysql | 5.0.24 |
| mysql | mysql | 5.0.45b:b |
| mysql | mysql | 5.0.82 |
| mysql | mysql | 5.0.84 |
| mysql | mysql | 5.0.87 |
| oracle | mysql | 5.0.0:alpha |
| oracle | mysql | 5.0.3:beta |
| oracle | mysql | 5.0.6 |
| oracle | mysql | 5.0.7 |
| oracle | mysql | 5.0.8 |
| oracle | mysql | 5.0.9 |
| oracle | mysql | 5.0.11 |
| oracle | mysql | 5.0.12 |
| oracle | mysql | 5.0.13 |
| oracle | mysql | 5.0.14 |
| oracle | mysql | 5.0.18 |
| oracle | mysql | 5.0.19 |
| oracle | mysql | 5.0.21 |
| oracle | mysql | 5.0.22 |
| oracle | mysql | 5.0.23 |
| oracle | mysql | 5.0.27 |
| oracle | mysql | 5.0.33 |
| oracle | mysql | 5.0.37 |
| oracle | mysql | 5.0.41 |
| oracle | mysql | 5.0.45 |
| oracle | mysql | 5.0.51 |
| oracle | mysql | 5.0.67 |
| oracle | mysql | 5.0.75 |
| oracle | mysql | 5.0.77 |
| oracle | mysql | 5.0.81 |
| oracle | mysql | 5.0.83 |
| oracle | mysql | 5.0.85 |
| oracle | mysql | 5.0.86 |
| oracle | mysql | 5.0.88 |
| oracle | mysql | 5.0.89 |
| oracle | mysql | 5.0.90 |
| oracle | mysql | 5.0.91 |
| mysql | mysql | 5.1.5 |
| mysql | mysql | 5.1.23 |
| mysql | mysql | 5.1.31 |
| mysql | mysql | 5.1.32 |
| mysql | mysql | 5.1.34 |
| mysql | mysql | 5.1.37 |
| oracle | mysql | 5.1 |
| oracle | mysql | 5.1.1 |
| oracle | mysql | 5.1.2 |
| oracle | mysql | 5.1.3 |
| oracle | mysql | 5.1.4 |
| oracle | mysql | 5.1.6 |
| oracle | mysql | 5.1.7 |
| oracle | mysql | 5.1.8 |
| oracle | mysql | 5.1.9 |
| oracle | mysql | 5.1.10 |
| oracle | mysql | 5.1.11 |
| oracle | mysql | 5.1.12 |
| oracle | mysql | 5.1.13 |
| oracle | mysql | 5.1.14 |
| oracle | mysql | 5.1.15 |
| oracle | mysql | 5.1.16 |
| oracle | mysql | 5.1.17 |
| oracle | mysql | 5.1.30 |
| oracle | mysql | 5.1.33 |
| oracle | mysql | 5.1.35 |
| oracle | mysql | 5.1.36 |
| oracle | mysql | 5.1.38 |
| oracle | mysql | 5.1.39 |
| oracle | mysql | 5.1.40 |
| oracle | mysql | 5.1.41 |
| oracle | mysql | 5.1.42 |
| oracle | mysql | 5.1.43 |
| oracle | mysql | 5.1.44 |
| oracle | mysql | 5.1.45 |
| oracle | mysql | 5.1.46 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| mysql-5.1 |
| ||||||||||||||
| mysql-dfsg-5.0 |
| ||||||||||||||
| mysql-dfsg-5.1 |
|
References