Read the docs
TI-2010-01570 Aliases CVE-2010-1626GHSA-6c9m-2jhw-8335

MySQL before 5.1.46 allows local users to delete the data and index files of another…

Priority LOW 18CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Partial · Partial
Fix status
Partial Red Hat: 3 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.

Why it matters now

EPSS 0.0049 42nd percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 3 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 50

CPEVersionsRoleVendor
cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*up to 5.1.45VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:*5.0.5.0.21VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*5.0.15VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*5.0.16VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*5.0.17VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*5.0.20VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*5.0.24VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.45b:*:*:*:*:*:*:*5.0.45bVulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:*5.0.82VulnerableMysql
cpe:2.3:a:mysql:mysql:5.0.84:*:*:*:*:*:*:*5.0.84VulnerableMysql
  • cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:* Versions up to 5.1.45 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.5.0.21:*:*:*:*:*:*:* Versions 5.0.5.0.21 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:* Versions 5.0.15 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:* Versions 5.0.16 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:* Versions 5.0.17 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:* Versions 5.0.20 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:* Versions 5.0.24 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.45b:*:*:*:*:*:*:* Versions 5.0.45b Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:* Versions 5.0.82 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.0.84:*:*:*:*:*:*:* Versions 5.0.84 Vulnerable ·Mysql
Show 40 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mysql:mysql:5.0.87:*:*:*:*:*:*:*5.0.87VulnerableMysql
cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:*5.1.5VulnerableMysql
cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*5.1.23VulnerableMysql
cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*5.1.31VulnerableMysql
cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*5.1.32VulnerableMysql
cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*5.1.34VulnerableMysql
cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*5.1.37VulnerableMysql
cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*5.0.18VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*5.0.19VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*5.0.21VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*5.0.22VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*5.0.23VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*5.0.27VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*5.0.33VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*5.0.37VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*5.0.41VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*5.0.45VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*5.0.51VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.67:*:*:*:*:*:*:*5.0.67VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*5.0.75VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*5.0.77VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*5.0.81VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*5.0.83VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.85:*:*:*:*:*:*:*5.0.85VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.86:*:*:*:*:*:*:*5.0.86VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.88:*:*:*:*:*:*:*5.0.88VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.89:*:*:*:*:*:*:*5.0.89VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.90:*:*:*:*:*:*:*5.0.90VulnerableOracle
cpe:2.3:a:oracle:mysql:5.0.91:*:*:*:*:*:*:*5.0.91VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*5.1.30VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*5.1.33VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*5.1.35VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*5.1.36VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*5.1.38VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*5.1.39VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*5.1.40VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*5.1.41VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*5.1.42VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.43:*:*:*:*:*:*:*5.1.43VulnerableOracle
cpe:2.3:a:oracle:mysql:5.1.44:*:*:*:*:*:*:*5.1.44VulnerableOracle
  • cpe:2.3:a:mysql:mysql:5.0.87:*:*:*:*:*:*:* Versions 5.0.87 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:* Versions 5.1.5 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:* Versions 5.1.23 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:* Versions 5.1.31 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:* Versions 5.1.32 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:* Versions 5.1.34 Vulnerable ·Mysql
  • cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:* Versions 5.1.37 Vulnerable ·Mysql
  • cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:* Versions 5.0.18 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:* Versions 5.0.19 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:* Versions 5.0.21 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:* Versions 5.0.22 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:* Versions 5.0.23 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:* Versions 5.0.27 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:* Versions 5.0.33 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:* Versions 5.0.37 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:* Versions 5.0.41 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:* Versions 5.0.45 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:* Versions 5.0.51 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.67:*:*:*:*:*:*:* Versions 5.0.67 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:* Versions 5.0.75 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:* Versions 5.0.77 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:* Versions 5.0.81 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:* Versions 5.0.83 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.85:*:*:*:*:*:*:* Versions 5.0.85 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.86:*:*:*:*:*:*:* Versions 5.0.86 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.88:*:*:*:*:*:*:* Versions 5.0.88 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.89:*:*:*:*:*:*:* Versions 5.0.89 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.90:*:*:*:*:*:*:* Versions 5.0.90 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.0.91:*:*:*:*:*:*:* Versions 5.0.91 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:* Versions 5.1.30 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:* Versions 5.1.33 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:* Versions 5.1.35 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:* Versions 5.1.36 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:* Versions 5.1.38 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:* Versions 5.1.39 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:* Versions 5.1.40 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:* Versions 5.1.41 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:* Versions 5.1.42 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.43:*:*:*:*:*:*:* Versions 5.1.43 Vulnerable ·Oracle
  • cpe:2.3:a:oracle:mysql:5.1.44:*:*:*:*:*:*:* Versions 5.1.44 Vulnerable ·Oracle

Remediation

Red Hat 1 advisory

  • RHSA-2010:0442 Released 2010-05-26 · Red Hat rating Important
    mysql security update
    • Red Hat Enterprise Linux (v. 5 server) mysql-5.0.77-4.el5_5.3, mysql-5.0.77-4.el5_5.3.i386, mysql-5.0.77-4.el5_5.3.ia64 +17
    • Red Hat Enterprise Linux Desktop (v. 5 client) mysql-5.0.77-4.el5_5.3, mysql-5.0.77-4.el5_5.3.i386, mysql-bench-5.0.77-4.el5_5.3.i386 +3
    • Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mysql-5.0.77-4.el5_5.3, mysql-bench-5.0.77-4.el5_5.3, mysql-bench-5.0.77-4.el5_5.3.i386 +6

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 4AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2010:0442
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2010:0442
Red Hat Enterprise Linux Desktop Workstation (v. 5 client)Fixed RHSA-2010:0442

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1626
  2. 2026-10-03 Alias added: GHSA-6c9m-2jhw-8335

References

Patch 1

Advisory 6

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences