EIP-2026-102930
PRE-CVEMySQL 4.x/5.0 (Linux) - User-Defined Function (UDF) Dynamic Library (2)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-102930. PoCs published by Marco Ivaldi.
AI-analyzed exploit summary This is a functional MySQL User Defined Function (UDF) exploit that allows local privilege escalation by executing system commands as the MySQL user (often root). It bypasses UDF security restrictions by including auxiliary symbols and demonstrates command execution via a custom `do_system` function.
Description
MySQL 4.x/5.0 (Linux) - User-Defined Function (UDF) Dynamic Library (2)
Exploits (1)
This is a functional MySQL User Defined Function (UDF) exploit that allows local privilege escalation by executing system commands as the MySQL user (often root). It bypasses UDF security restrictions by including auxiliary symbols and demonstrates command execution via a custom `do_system` function.