{"api_version":"1","generated_at":"2026-07-23T04:28:04+00:00","cve":"CVE-2005-0709","urls":{"html":"https://cve.report/CVE-2005-0709","api":"https://cve.report/api/cve/CVE-2005-0709.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-0709","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-0709"},"summary":{"title":"CVE-2005-0709","description":"MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.","state":"PUBLISHED","assigner":"redhat","published_at":"2005-05-02 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-94","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.6","severity":"","vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-348.html","name":"http://www.redhat.com/support/errata/RHSA-2005-348.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml","name":"http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Gentoo Linux Documentation\n--\n  MySQL: Multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1","name":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"#101864: Multiple Security Vulnerabilities in The \"MySQL\" Package","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/12781","name":"http://www.securityfocus.com/bid/12781","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"MySQL AB MySQL Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://marc.info/?l=bugtraq&m=111066115808506&w=2","name":"http://marc.info/?l=bugtraq&m=111066115808506&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","name":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"APPLE-SA-2005-08-17 Security Update 2005-007 v1.1","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.trustix.org/errata/2005/0009/","name":"http://www.trustix.org/errata/2005/0009/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"text/plain","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-334.html","name":"http://www.redhat.com/support/errata/RHSA-2005-334.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"rhn.redhat.com | Red Hat Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","name":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"APPLE-SA-2005-08-15 Security Update 2005-007","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2005/dsa-707","name":"http://www.debian.org/security/2005/dsa-707","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Debian -- Security Information -- DSA-707-1 mysql","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.novell.com/linux/security/advisories/2005_19_mysql.html","name":"http://www.novell.com/linux/security/advisories/2005_19_mysql.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Security Announcement","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html","name":"http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://usn.ubuntu.com/96-1/","name":"https://usn.ubuntu.com/96-1/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-96-1: mySQL vulnerabilities | Ubuntu security notices","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:060","name":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:060","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Advisories - Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0709","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0709","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mysql","cpe5":"mysql","cpe6":"4.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mysql","cpe5":"mysql","cpe6":"4.1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mysql","cpe5":"mysql","cpe6":"4.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"3.23.49","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.11","cpe7":"gamma","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.5a","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.7","cpe7":"gamma","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.8","cpe7":"gamma","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.0.9","cpe7":"gamma","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.1.0","cpe7":"alpha","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.1.2","cpe7":"alpha","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.1.3","cpe7":"beta","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"709","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"mysql","cpe6":"4.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:21:06.515Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"2005-0009","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"],"url":"http://www.trustix.org/errata/2005/0009/"},{"name":"DSA-707","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2005/dsa-707"},{"name":"20050310 Mysql CREATE FUNCTION libc arbitrary code execution.","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=111066115808506&w=2"},{"name":"20050310 Mysql CREATE FUNCTION libc arbitrary code execution.","tags":["mailing-list","x_refsource_VULNWATCH","x_transferred"],"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html"},{"name":"RHSA-2005:334","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2005-334.html"},{"name":"101864","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1"},{"name":"SUSE-SA:2005:019","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://www.novell.com/linux/security/advisories/2005_19_mysql.html"},{"name":"USN-96-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"https://usn.ubuntu.com/96-1/"},{"name":"RHSA-2005:348","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2005-348.html"},{"name":"APPLE-SA-2005-08-15","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html"},{"name":"MDKSA-2005:060","tags":["vendor-advisory","x_refsource_MANDRAKE","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:060"},{"name":"GLSA-200503-19","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml"},{"name":"oval:org.mitre.oval:def:10479","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479"},{"name":"APPLE-SA-2005-08-17","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html"},{"name":"12781","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/12781"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-03-10T00:00:00.000Z","descriptions":[{"lang":"en","value":"MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-03T20:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"2005-0009","tags":["vendor-advisory","x_refsource_TRUSTIX"],"url":"http://www.trustix.org/errata/2005/0009/"},{"name":"DSA-707","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2005/dsa-707"},{"name":"20050310 Mysql CREATE FUNCTION libc arbitrary code execution.","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=111066115808506&w=2"},{"name":"20050310 Mysql CREATE FUNCTION libc arbitrary code execution.","tags":["mailing-list","x_refsource_VULNWATCH"],"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html"},{"name":"RHSA-2005:334","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2005-334.html"},{"name":"101864","tags":["vendor-advisory","x_refsource_SUNALERT"],"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1"},{"name":"SUSE-SA:2005:019","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://www.novell.com/linux/security/advisories/2005_19_mysql.html"},{"name":"USN-96-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"https://usn.ubuntu.com/96-1/"},{"name":"RHSA-2005:348","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2005-348.html"},{"name":"APPLE-SA-2005-08-15","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html"},{"name":"MDKSA-2005:060","tags":["vendor-advisory","x_refsource_MANDRAKE"],"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:060"},{"name":"GLSA-200503-19","tags":["vendor-advisory","x_refsource_GENTOO"],"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml"},{"name":"oval:org.mitre.oval:def:10479","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479"},{"name":"APPLE-SA-2005-08-17","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html"},{"name":"12781","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/12781"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2005-0709","datePublished":"2005-03-11T05:00:00.000Z","dateReserved":"2005-03-11T00:00:00.000Z","dateUpdated":"2024-08-07T21:21:06.515Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-05-02 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-94","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","baseScore":4.6,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFEDB808-A8D8-403E-9103-AB486C793EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FB1CEA0B-1234-4166-BD32-CCBB4016A9BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"0EF35900-4051-4E07-9BFA-347BEAB8AB67"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41BEAD26-ADDC-4FC6-A493-584315183936"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"153E8DFB-4197-4117-87C6-C0FBE3C05600"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"765BF98E-7AB1-45EA-9935-2C311E621211"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22408224-0634-4CC6-888F-892E9D932CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2B2646B4-593E-4AC9-8292-1AD805632DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*","matchCriteriaId":"4D57E557-7F6D-4618-86AC-B10C08341900"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*","matchCriteriaId":"B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8EC10CD2-B9A3-46DD-839E-C7FB6647155F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*","matchCriteriaId":"E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5EC21395-4C78-4343-9452-578B24C2656D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*","matchCriteriaId":"8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"5032D74E-CC8D-4217-AEF0-98DCD1820AE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"B3340604-0D38-4494-847B-E9E8B0026A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"EC117BF1-3127-477A-9500-C9A32596ED8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"FED5BA55-FF4F-4F89-89B1-554624DDA1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*","matchCriteriaId":"E00312DA-AB34-4E5B-AB7C-71AA3AD0AC8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*","matchCriteriaId":"4A0C43BB-81C6-496F-AC7B-61382DE76B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.23:*:*:*:*:*:*:*","matchCriteriaId":"2C9FF055-99BC-4E15-80C8-80FEF3CBA990"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"BB7196E5-8483-4872-A78A-8BE7EC551CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"14DDA057-D211-42BD-B8AF-F250F1C5B88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"32CA2F70-77E4-4280-B845-4CE5774162C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FA788329-9A66-49EA-B7E4-E465C0E7E320"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"709","Ordinal":"1","Title":"CVE-2005-0709","CVE":"CVE-2005-0709","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"709","Ordinal":"1","NoteData":"MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.","Type":"Description","Title":"CVE-2005-0709"},{"CveYear":"2005","CveId":"709","Ordinal":"2","NoteData":"2005-03-11","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"709","Ordinal":"3","NoteData":"2018-10-03","Type":"Other","Title":"Modified"}]}}}