CVE-2005-0710: mysql
Vulnerability summary
CVE-2005-0710 is a medium (CVSS 4.6) vulnerability in mysql. EPSS estimates a 12.84% chance of exploitation in the next 30 days, higher than 96.2% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 11-03-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
12.84%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 12.84% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (archives.neohapsis.com)
Maturity: unknown
MySQL 4.x - CREATE FUNCTION mysql.func Table Arbitrary Library Injection
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mysql1 product
- mysql4.1.0 | 4.1.3 | 4.1.10
Oracle1 product
- mysql3.23.49 | 4.0.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.5 | 4.0.5a | 4.0.6 | 4.0.7 | 4.0.7:gamma | 4.0.8 | 4.0.8:gamma | 4.0.9 | 4.0.9:gamma | 4.0.10 | 4.0.11 | 4.0.11:gamma | 4.0.12 | 4.0.13 | 4.0.14 | 4.0.15 | 4.0.18 | 4.0.20 | 4.0.21 | 4.0.23 | 4.1.0:alpha | 4.1.2:alpha | 4.1.3:beta | 4.1.4 | 4.1.5
2 vendors · 2 products
References
16 links
Show all 16 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10180VDB EntrySignatureX Refsource OVAL