CVE-2010-1621

No fix known EPSS 1%

The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command.

Published 2010-05-14 · CVE record · OSV

Products: mysql