Description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

Remediation

References

CVE-2005-0709

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1893)

WordPress Plugin Infusionsoft Gravity Forms Add-on Arbitrary File Upload (1.5.10)

WordPress Plugin WP Fastest Cache SQL Injection (1.2.1)

WordPress Plugin WP Symposium Pro Social Network Cross-Site Scripting (16.01)

WordPress Plugin Rate my Post-WP Rating System Multiple Vulnerabilities (3.3.4)

Severity

Medium

Classification

CVE-2005-0709 CWE-94

Tags

Missing Update Known Vulnerabilities