VULNERABILITY INTELLIGENCE
CVE-2005-0709
CVSS score4.6 MEDIUM
EPSS probability17.84%
CISA KEVNot currently listed
Published2005-05-02
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')