PT-2005-3464 · Oracle · Mysql Server

Reid Borsuk · Published 2005-08-16 · Updated 2019-12-17 · CVE-2005-2573

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MySQL versions 4.0 through 4.0.24 MySQL versions 4.1 through 4.1.12 MySQL versions 5.0 through 5.0.6-beta

Description The issue arises from an incomplete blacklist used in a directory traversal check within the mysql create function function. This allows attackers to include arbitrary files using the backslash (``) character when running on Windows.

Recommendations For MySQL versions 4.0 through 4.0.24, update to version 4.0.25 or later. For MySQL versions 4.1 through 4.1.12, update to version 4.1.13 or later. For MySQL versions 5.0 through 5.0.6-beta, update to version 5.0.7-beta or later.

Fix

Related Identifiers

CVE-2005-2573

Affected Products

Mysql Server

References · 7

• http://appsecinc.com/resources/alerts/mysql/2005-001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2573 · Security Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/035847.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21738 · Note
• http://mysql.bkbits.net:8080/mysql-4.0/cset%40428b981bg2iwh3CbGANDaF-W6DbttA · Note
• http://mysql.bkbits.net:8080/mysql-4.0/gnupatch%40428b981bg2iwh3CbGANDaF-W6DbttA · Note
• http://marc.info/?l=bugtraq&m=112360618320729&w=2 · Note