Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MySQL CREATE FUNCTION功能libc函数库允许执行任意代码漏洞
Vulnerability Description
Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。该数据库系统具有性能高、成本低、可靠性好等特点。 MySQL数据库的CREATE FUNCTION命令用于在MySQL中实现用户自定义函数的管理，MySQL对用户自定义函数的引入和参数使用实现有问题，拥有数据库管理员权限的用户可能利用漏洞在运行MySQL数据库的主机上以MySQL进程的权限执行任意指令。 如果经过认证的用户对MySQL管理数据库'mysql'拥有INSERT和DELETE的权限的话，就可能通过注入畸形的
CVSS Information
N/A
Vulnerability Type
N/A