Description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

Remediation

References

CVE-2005-0709

Related Vulnerabilities

WordPress Plugin JoomSport-for Sports: Team & League, Football, Hockey & more Multiple SQL Injection Vulnerabilities (5.2.5)

WordPress Plugin Catch Import Export Security Bypass (1.8)

Apache HTTP Server Other Vulnerability (CVE-2003-0134)

WordPress Plugin BackupBuddy Arbitrary File Download (8.7.4.1)

WordPress Plugin WordPress Ultra Simple Paypal Shopping Cart Multiple Cross-Site Scripting Vulnerabilities (4.3.9.0)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-94 CVE-2005-0709