Unrated severityNVD Advisory· Published Jul 13, 2010· Updated Jun 16, 2026
CVE-2010-2008
CVE-2010-2008
Description
MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*+ 6 more
- cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
12- bugs.mysql.com/bug.phpnvdExploitIssue TrackingVendor Advisory
- www.securityfocus.com/bid/41198nvdExploitThird Party AdvisoryVDB Entry
- www.securitytracker.com/idnvdExploitThird Party AdvisoryVDB Entry
- lists.fedoraproject.org/pipermail/package-announce/2010-July/044546.htmlnvdThird Party Advisory
- secunia.com/advisories/40333nvdThird Party Advisory
- secunia.com/advisories/40762nvdThird Party Advisory
- www.ubuntu.com/usn/USN-1017-1nvdThird Party Advisory
- www.ubuntu.com/usn/USN-1397-1nvdThird Party Advisory
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11869nvdThird Party Advisory
- dev.mysql.com/doc/refman/5.1/en/news-5-1-48.htmlnvdBroken Link
- www.mandriva.com/security/advisoriesnvdBroken Link
- www.vupen.com/english/advisories/2010/1918nvdPermissions Required
News mentions
0No linked articles in our index yet.