CVE ID:	CVE-2010-1848
Description:	Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.
Test IDs:	1.3.6.1.4.1.25623.1.0.67533   1.3.6.1.4.1.25623.1.0.67532   1.3.6.1.4.1.25623.1.0.67541   1.3.6.1.4.1.25623.1.0.67531
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1848 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:107 http://lists.mysql.com/commits/107532 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10258 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7210 RedHat Security Advisories: RHSA-2010:0442 http://www.redhat.com/support/errata/RHSA-2010-0442.html RedHat Security Advisories: RHSA-2010:0824 http://www.redhat.com/support/errata/RHSA-2010-0824.html http://securitytracker.com/id?1024031 SuSE Security Announcement: SUSE-SR:2010:019 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html SuSE Security Announcement: SUSE-SR:2010:021 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html http://www.ubuntu.com/usn/USN-1397-1