The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command.
References
Configurations
Information
Published : 2010-05-14 12:30
Updated : 2018-01-04 18:29
NVD link : CVE-2010-1621
Mitre link : CVE-2010-1621
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
mysql
- mysql