NVD

Id
13499  
Name
CVE-2010-2008  
Description
MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-07-13  
Modified Date
2011-01-19  
Seq
2010-2008  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74553 13499 CVE-2010-2008 http://bugs.mysql.com/bug.php?id=53804  View
74554 13499 CVE-2010-2008 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-48.html  View
74555 13499 CVE-2010-2008 FEDORA-2010-11135  View
74556 13499 CVE-2010-2008 oval:org.mitre.oval:def:11869  View
74557 13499 CVE-2010-2008 MDVSA-2010:155  View
74558 13499 CVE-2010-2008 41198  View
74559 13499 CVE-2010-2008 1024160  View
74560 13499 CVE-2010-2008 USN-1017-1  View
74561 13499 CVE-2010-2008 ADV-2010-1918  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39027 JVNDB-2010-004812 MySQL におけるサービス運用妨害 (DoS) の脆弱性 MySQL にはサービス運用妨害 (サーバクラッシュおよびデータベース損失) 状態となる脆弱性が存在します。 CVE-2010-2008 44588 CVE-2010-2008 13499 3.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004812.html 2010-06-02 2012-09-25 View