CVE-2005-2573: Medium severity MySQL mysql vulnerability
The mysqlcreatefunction function in sqludf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2573?
CVE-2005-2573 is classified as a medium severity vulnerability due to its potential for local file inclusion.
How do I fix CVE-2005-2573?
To fix CVE-2005-2573, upgrade to MySQL versions 4.0.25, 4.1.13, or 5.0.7-beta or later.
Which versions of MySQL are affected by CVE-2005-2573?
CVE-2005-2573 affects MySQL versions 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta.
What kind of attacks can exploit CVE-2005-2573?
CVE-2005-2573 can be exploited to perform local file inclusion attacks, allowing unauthorized file access.
What is the root cause of CVE-2005-2573?
The root cause of CVE-2005-2573 is an incomplete blacklist in the directory traversal check of the mysql_create_function in affected MySQL versions.