CVE-2005-0709: MySQL

Medium severity, CVSS 4.6. EPSS: 18.4% chance of exploitation in the next 30 days.

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.

Affected products

• MySQL MySQL: version 4.1.0 only; version 4.1.3 only; version 4.1.10 only
• Oracle MySQL: version 3.23.49 only; version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; …

Published 2005-05-02. Last modified 2026-06-16.