CVE-2005-2573

The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an…

published August 16, 2005

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02808 · 86.3th percentile
Published
2005-08-16T04:00Z
EPSS history
Timeline
  • 16 AUG 04:00Z
    The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an…
    cvelistv5