| Name | CVE-2010-1621 |
| Description | The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| mysql-5.1 | source | (unstable) | 5.1.46-1 | |||
| mysql-dfsg-5.0 | source | (unstable) | (not affected) |
- mysql-dfsg-5.0 <not-affected> (Vulnerable code not present)
https://bugzilla.redhat.com/show_bug.cgi?id=590190