Description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

Remediation

References

CVE-2005-0709

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2000-1235)

WordPress Plugin Zibbra Cross-Site Scripting (1.7.0)

Apache HTTP Server CVE-2024-40725 Vulnerability (CVE-2024-40725)

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-12872)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Cross-Site Scripting (1.7.2)

Severity

Medium

Classification

CVE-2005-0709 CWE-94

Tags

Missing Update Known Vulnerabilities