Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-0711. PoCs published by Marco Ivaldi.
AI-analyzed exploit summary This exploit leverages MySQL's User Defined Function (UDF) feature to execute arbitrary system commands by creating a malicious shared library. It requires authenticated access with sufficient privileges to create functions and write files.
Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.
Exploits (1)
This exploit leverages MySQL's User Defined Function (UDF) feature to execute arbitrary system commands by creating a malicious shared library. It requires authenticated access with sufficient privileges to create functions and write files.