← Database

CVE-2005-0709

MEDIUM CVSS: 4.6 Published: 2005-05-02 Modified: 2026-06-16

Description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

Affected Platforms

Mysql MysqlOracle Mysql

Weakness Type

CWE-94

References