CVE-2005-0710 Privilege escalation in n/a
Authenticated users with INSERT and DELETE privileges can bypass library restrictions to execute arbitrary code via the mysql.func table.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-0710?
CVE-2005-0710 is a medium-severity vulnerability in Mysql Mysql, published on 11 Mar 2005. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.
Which versions are affected by CVE-2005-0710?
It affects 2 products.
Products include Mysql Mysql, Oracle Mysql.
How do I fix CVE-2005-0710?
Upgrade to a fixed version.
Is CVE-2005-0710 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-0710 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Mysql Mysql
Sources
Also known as GHSA-5wh5-j2hf-hpfc.