Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-0709
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0709

2005-05-0204:00:00
CWE-94
[email protected]
web.nvd.nist.gov
3

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.968

Percentile

99.7%

JSON

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

Affected configurations

NVD
Node
mysqlmysqlMatch4.1.0
OR
mysqlmysqlMatch4.1.3
OR
mysqlmysqlMatch4.1.10
OR
oraclemysqlMatch3.23.49
OR
oraclemysqlMatch4.0.0
OR
oraclemysqlMatch4.0.1
OR
oraclemysqlMatch4.0.2
OR
oraclemysqlMatch4.0.3
OR
oraclemysqlMatch4.0.4
OR
oraclemysqlMatch4.0.5
OR
oraclemysqlMatch4.0.5a
OR
oraclemysqlMatch4.0.6
OR
oraclemysqlMatch4.0.7
OR
oraclemysqlMatch4.0.7gamma
OR
oraclemysqlMatch4.0.8
OR
oraclemysqlMatch4.0.8gamma
OR
oraclemysqlMatch4.0.9
OR
oraclemysqlMatch4.0.9gamma
OR
oraclemysqlMatch4.0.10
OR
oraclemysqlMatch4.0.11
OR
oraclemysqlMatch4.0.11gamma
OR
oraclemysqlMatch4.0.12
OR
oraclemysqlMatch4.0.13
OR
oraclemysqlMatch4.0.14
OR
oraclemysqlMatch4.0.15
OR
oraclemysqlMatch4.0.18
OR
oraclemysqlMatch4.0.20
OR
oraclemysqlMatch4.0.21
OR
oraclemysqlMatch4.0.23
OR
oraclemysqlMatch4.1.0alpha
OR
oraclemysqlMatch4.1.2alpha
OR
oraclemysqlMatch4.1.3beta
OR
oraclemysqlMatch4.1.4
OR
oraclemysqlMatch4.1.5

Related

cvelist 1
checkpoint_advisories 1
cve 1
ubuntucve 1
redhat 2
centos 1
openvas 9
ubuntu 1
nessus 17
gentoo 1
freebsd 1
suse 1
debian 2
osv 1
cvelist
cvelist
CVE-2005-0709
2005-03-11 05:00:00
checkpoint_advisories
checkpoint_advisories
MySQL CREATE FUNCTION libc Arbitrary Code Execution (CVE-2005-0709)
2009-10-25 00:00:00
cve
cve
CVE-2005-0709
2005-05-02 04:00:00
ubuntucve
ubuntucve
CVE-2005-0709
2005-05-02 00:00:00
redhat
redhat
(RHSA-2005:348) mysql-server security update
2005-04-05 00:00:00
(RHSA-2005:334) mysql security update
2005-03-28 00:00:00
centos
centos
mysql security update
2005-04-05 22:56:06
openvas
openvas
Gentoo Security Advisory GLSA 200503-19 (mysql)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200503-19 (mysql)
2008-09-24 00:00:00
Ubuntu: Security Advisory (USN-96-1)
2022-08-26 00:00:00
ubuntu
ubuntu
mySQL vulnerabilities
2005-03-16 00:00:00
nessus
nessus
Fedora Core 3 : mysql-3.23.58-16.FC3.1 (2005-304)
2005-09-12 00:00:00
FreeBSD : mysql-server -- multiple remote vulnerabilities (619ef337-949a-11d9-b813-00d05964249f)
2005-07-13 00:00:00
SUSE-SA:2005:019: mysql
2005-03-25 00:00:00
gentoo
gentoo
MySQL: Multiple vulnerabilities
2005-03-16 00:00:00
freebsd
freebsd
mysql-server -- multiple remote vulnerabilities
2005-03-11 00:00:00
suse
suse
remote code execution in mysql
2005-03-24 17:14:27
debian
debian
[SECURITY] [DSA 707-1] New mysql packages fix several vulnerabilities
2005-04-13 14:45:01
[SECURITY] [DSA 707-1] New mysql packages fix several vulnerabilities
2005-04-13 14:45:01
osv
osv
mysql - several
2005-04-13 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.3

Confidence

High

EPSS

0.968

Percentile

99.7%

JSON
Related for NVD:CVE-2005-0709
cvelist1checkpoint_advisories1cve1ubuntucve1redhat2centos1openvas9ubuntu1nessus17gentoo1freebsd1suse1debian2osv1