NVD

Id
68262  
Name
CVE-2005-2573  
Description
The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash () character.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2005-08-16  
Modified Date
2017-07-10  
Seq
2005-2573  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
352861 68262 CVE-2005-2573 20050808 [AppSecInc Advisory MYSQL05-V0001] Improper Filtering of Directory Traversal Characters in MySQL User Defined Functions  View
352862 68262 CVE-2005-2573 20050808 [AppSecInc Advisory MYSQL05-V0001] Improper Filtering of Directory Traversal Characters in MySQL User Defined Functions  View
352863 68262 CVE-2005-2573 http://mysql.bkbits.net:8080/mysql-4.0/cset@428b981bg2iwh3CbGANDaF-W6DbttA  View
352864 68262 CVE-2005-2573 http://mysql.bkbits.net:8080/mysql-4.0/gnupatch@428b981bg2iwh3CbGANDaF-W6DbttA  View
352865 68262 CVE-2005-2573 http://www.appsecinc.com/resources/alerts/mysql/2005-001.html  View
352866 68262 CVE-2005-2573 mysql-udf-directory-traversal(21738)  View

Related JVN