VulnerabilityModified
CVE-2005-0709
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
MEDIUM 4.6EPSS 18.4%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 18.4%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 18.44% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- mysql/mysql · oracle/mysql
- Source
- secalert@redhat.com
References
- http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.htmlExploit
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://marc.info/?l=bugtraq&m=111066115808506&w=2
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
- http://www.debian.org/security/2005/dsa-707Patch
- http://www.gentoo.org/security/en/glsa/glsa-200503-19.xmlPatch
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:060
- http://www.novell.com/linux/security/advisories/2005_19_mysql.htmlPatch
- http://www.redhat.com/support/errata/RHSA-2005-334.html
- http://www.redhat.com/support/errata/RHSA-2005-348.html
- http://www.securityfocus.com/bid/12781Exploit, Patch
- http://www.trustix.org/errata/2005/0009/Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479
- https://usn.ubuntu.com/96-1/
- http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.htmlExploit
- http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html
- http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
- http://marc.info/?l=bugtraq&m=111066115808506&w=2
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
- http://www.debian.org/security/2005/dsa-707Patch
- http://www.gentoo.org/security/en/glsa/glsa-200503-19.xmlPatch
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:060
- http://www.novell.com/linux/security/advisories/2005_19_mysql.htmlPatch
- http://www.redhat.com/support/errata/RHSA-2005-334.html
- http://www.redhat.com/support/errata/RHSA-2005-348.html
- http://www.securityfocus.com/bid/12781Exploit, Patch
- http://www.trustix.org/errata/2005/0009/Patch
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479
- https://usn.ubuntu.com/96-1/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.