NetSight
IP …
low3.5Public exploit code

CVE-2010-2008

MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory.

Affected products

VendorProductAffected versions
OracleMysql
before 5.1.48
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.10, 10.04, 10.10, 11.04
FedoraprojectFedora
Version 13

Weakness classification

CWE-77

References