NetSight
IP …
medium5.0

CVE-2005-2573

The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an in…

Impact

The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.

Affected products

VendorProductAffected versions
MysqlMysql
Versions 4.1.0, 4.1.3, 4.1.10, 5.0.1, 5.0.2, 5.0.3
OracleMysql
Versions 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5

References