CVE-2005-0709
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10 - Authenticated Remote Code Execution via CREATE FUNCTION
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-0709. PoCs published by Stefano Di Paola.
AI-analyzed exploit summary This Perl script exploits CVE-2005-0709 by leveraging MySQL's CREATE FUNCTION to load libc functions (on_exit, strcat, exit) and manipulate memory to execute arbitrary shellcode, achieving remote code execution. It requires authenticated access with sufficient privileges to create functions.
Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
Exploits (1)
This Perl script exploits CVE-2005-0709 by leveraging MySQL's CREATE FUNCTION to load libc functions (on_exit, strcat, exit) and manipulate memory to execute arbitrary shellcode, achieving remote code execution. It requires authenticated access with sufficient privileges to create functions.