CVE-2005-0710

Description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.

Risk Information

Base Score

8.1

MODERATE

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS Score

Exploitation Probability

11.785

Associated Vulnerability

Vulnerability	OS Platform
Vulnerability CVE-2005-0709,CVE-2005-0710,CVE-2005-0711 are affected in Mysql 4.1.10	Windows
Vulnerability CVE-2005-0709,CVE-2005-0710,CVE-2005-0711 are affected in Mysql 4.1.10 (For Linux)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234