Description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.

Remediation

References

CVE-2005-0710

Related Vulnerabilities

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5368)

phpMyFAQ Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-0792)

MyBB Other Vulnerability (CVE-2007-0622)

WordPress Plugin JSM file_get_contents() Shortcode Server-Side Request Forgery (2.7.0)

SharePoint Download of Code Without Integrity Check Vulnerability (CVE-2020-1453)

Severity

Medium

Classification

CVE-2005-0710

Tags

Missing Update Known Vulnerabilities