CVE-2005-0709 Code injection in n/a

Medium 4.6 Published 11 Mar 2005 Updated 7 Aug 2024

Authenticated users with specific privileges can execute arbitrary code via CREATE FUNCTION, requiring an upgrade to secure the database.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2005-0709?

CVE-2005-0709 is a medium-severity code injection vulnerability in Mysql Mysql, published on 11 Mar 2005. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

Weakness: CWE-94

Which versions are affected by CVE-2005-0709?

It affects 2 products.

Products include Mysql Mysql, Oracle Mysql.

How do I fix CVE-2005-0709?

Upgrade to a fixed version.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2005-0709 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-0709 exists.

Public exploit code: 1 Exploit-DB entry.

All Mysql Mysql vulnerabilities

Sources

Also known as GHSA-3x8w-p58r-45ff.