CVE-2005-2573

Опубликовано: 16 авг. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash () character.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*

cpe:2.3:a:mysql:mysql:4.1.3:*:*:*:*:*:*:*

cpe:2.3:a:mysql:mysql:4.1.10:*:*:*:*:*:*:*

cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.21:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.0.24:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.1.2:alpha:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:4.1.5:*:*:*:*:*:*:*

cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00695

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-2573

ubuntu

около 20 лет назад

CVE-2005-2573

debian

около 20 лет назад

The mysql_create_function function in sql_udf.cc for MySQL 4.0 before ...

GHSA-qg5c-7q7p-mwc6

github

больше 3 лет назад

EPSS

Процентиль: 71%

0.00695

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other