NVD

Id
66461  
Name
CVE-2005-0710  
Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-05-02  
Modified Date
2017-07-10  
Seq
2005-0710  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
345792 66461 CVE-2005-0710 20050310 Mysql CREATE FUNCTION mysql.func table arbitrary library injection  View
345793 66461 CVE-2005-0710 APPLE-SA-2005-08-17  View
345794 66461 CVE-2005-0710 APPLE-SA-2005-08-15  View
345795 66461 CVE-2005-0710 20050310 Mysql CREATE FUNCTION mysql.func table arbitrary library injection  View
345796 66461 CVE-2005-0710 oval:org.mitre.oval:def:10180  View
345797 66461 CVE-2005-0710 101864  View
345798 66461 CVE-2005-0710 DSA-707  View
345799 66461 CVE-2005-0710 GLSA-200503-19  View
345800 66461 CVE-2005-0710 MDKSA-2005:060  View
345801 66461 CVE-2005-0710 SUSE-SA:2005:019  View
345802 66461 CVE-2005-0710 RHSA-2005:334  View
345803 66461 CVE-2005-0710 RHSA-2005:348  View
345804 66461 CVE-2005-0710 12781  View
345805 66461 CVE-2005-0710 2005-0009  View
345806 66461 CVE-2005-0710 USN-96-1  View
345807 66461 CVE-2005-0710 mysql-udfinit-gain-access(19658)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61978 JVNDB-2005-000180 MySQL のユーザ定義関数における任意のディレクトリにあるオブジェクトファイルを参照する関数を作成される脆弱性 ------------ CVE-2005-0710 11914 CVE-2005-0710 66461 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000180.html 2005-03-11 2007-04-01 View