VULNERABILITY INTELLIGENCE
CVE-2005-0709
CVSS score4.6 NONE
EPSS probability18.44%
CISA KEVNot currently listed
Published2005-05-02
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P
Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
Weakness classification
- nvd@nist.gov: CWE-94