CVSS: 8.8EPSS: 33%CPEs: 34EXPL: 3CVE-2005-0709 – MySQL 4.x - CREATE FUNCTION Arbitrary libc Code Execution
https://notcve.org/view.php?id=CVE-2005-0709
11 Mar 2005 — MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit. Debian Security Advisory 707-1. Multiple issues with MySQL, including: incorrect privilege handling (users get illegitimate access to databases named similarly to those they have legitimate access to), arbitrary command execution for any user that has been granted INSE... • https://www.exploit-db.com/exploits/25209 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.8EPSS: 24%CPEs: 34EXPL: 2CVE-2005-0710 – MySQL 4.x - CREATE FUNCTION mysql.func Table Arbitrary Library Injection
https://notcve.org/view.php?id=CVE-2005-0710
11 Mar 2005 — MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary libraries by using INSERT INTO to modify the mysql.func table, which is processed by the udf_init function. Debian Security Advisory 707-1. Multiple issues with MySQL, including: incorrect privilege handling (users get illegitimate access to databases named similarly to those they have legitimate access to), arbitrary command executio... • https://www.exploit-db.com/exploits/25210 •
CVSS: 5.5EPSS: 0%CPEs: 34EXPL: 3CVE-2005-0711 – MySQL 4.x - CREATE Temporary TABLE Symlink Privilege Escalation
https://notcve.org/view.php?id=CVE-2005-0711
11 Mar 2005 — MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack. Debian Security Advisory 707-1. Multiple issues with MySQL, including: incorrect privilege handling (users get illegitimate access to databases named similarly to those they have legitimate access to), arbitrary command execution for any user that has been granted INSERT and DELETE righ... • https://www.exploit-db.com/exploits/25211 •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 0CVE-2005-0004 – dsa-647.txt
https://notcve.org/view.php?id=CVE-2005-0004
20 Jan 2005 — The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files. El script mysqlaccess de MySQL 4.0.23 y anteriores, 4.1.x anteriores a 4.1.10, 5.0.x anteriores a 5.0.3, y otras versiones incluyendo 3.x permite a usuarios locales sobreescribir ficheros arbitrariamente o leer ficheros temporales mediante un enlace de enlaces simbólicos ... • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 7.5EPSS: 3%CPEs: 5EXPL: 3CVE-2004-0835 – MySQL 3.x/4.x - ALTER TABLE/RENAME Forces Old Permission Checks
https://notcve.org/view.php?id=CVE-2004-0835
13 Oct 2004 — MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities. MySQL 4 anteriores a 4.0.21 y 3.x anteriores a 3.23.49 comprueban los derechos CREATE/INSERT de la tabla original en lugar de los de la tabla de destino en una operación ALTER TABLE RANAME, lo que podría permitir a atacantes realizar actividad... • https://www.exploit-db.com/exploits/24669 •
CVSS: 7.5EPSS: 2%CPEs: 4EXPL: 1CVE-2004-0837 – dsa-562.txt
https://notcve.org/view.php?id=CVE-2004-0837
13 Oct 2004 — MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs. MySQL 4 anteriores a 4.0.21 y 3.x anteriores a 3.23.49 permiten a atacantes causar una denegación de servicio (caída o cuelgue) mediante múltiples hilos de ejecución que alterán simultaneamente UNIONes de tablas MERGE. Several problems have been discovered in MySQL, a commonly used SQL database on Unix servers, including a denial of... • http://bugs.mysql.com/2408 •
CVSS: 5.5EPSS: 0%CPEs: 75EXPL: 0CVE-2004-0381 – dsa-483.txt
https://notcve.org/view.php?id=CVE-2004-0381
06 Apr 2004 — mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file. mysqlbug de MySQL pemite a usuarios locales sobreescribir ficheros elgidos arbitrariamente mediante un ataque de enlaces simbólicos sobre el fichero temporal failed-mysql-bugreport The scripts mysqld_multi and mysqlbug in MySQL allow local users to overwrite arbitrary files via symlink attacks. • http://marc.info/?l=bugtraq&m=108023246916294&w=2 •
CVSS: 9.1EPSS: 16%CPEs: 66EXPL: 3CVE-2003-1480 – MySQL 3.x/4.0.x - Weak Password Encryption
https://notcve.org/view.php?id=CVE-2003-1480
31 Dec 2003 — MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods. • https://www.exploit-db.com/exploits/22565 • CWE-310: Cryptographic Issues •
CVSS: 9.8EPSS: 70%CPEs: 70EXPL: 3CVE-2003-0780 – MySQL 3.23.x/4.0.x - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2003-0780
12 Sep 2003 — Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. Desbordamiento de búfer en get_salt_from_password de sql_acl.cc de MySQL 4.0.14 y anteriores, y 3.23.x, permite a atacantes ejecutar código arbitrario mediante un campo de contraseña largo. • https://www.exploit-db.com/exploits/98 •