| Package | Affected versions | Patched versions |
|---|---|---|
| mysql | ≤ 5.1.45 |
The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to uninstall arbitrary plugins via the UNINSTALL PLUGIN command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free