peter bassill · operator
$ cve CVE-2005-0709 JSON

CVE-2005-0709 EXPLOIT

4.6
MEDIUM · CVSS 2.0 · EPSS 18.4% (pctl 97)

Patch early

A public exploit exists.

Description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

Scoring

CVSS4.6 (MEDIUM, v2.0)
VectorAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS18.44% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-94
On CISA KEVno
Public exploityes
Published2005-05-02
Last modified2026-06-16

Affected (2)

VendorProduct
mysqlmysql
oraclemysql

Public exploits

SourceTitleDate
exploit-dbMySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution2005-03-11

References

→ the Explorer  ·  watch your stack  ·  NVD