CVE-2005-2573

Published: Aug 16, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.

Affected (38)

Products: Mysql: Mysql · Oracle: Mysql

1 product

1 product

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Version 4.1.0
Mysql Mysql	Version 4.1.10
Mysql Mysql	Version 4.1.3
Mysql Mysql	Version 5.0.1
Mysql Mysql	Version 5.0.2
Mysql Mysql	Version 5.0.3
Mysql Mysql	Version 5.0.4
Oracle Mysql	Version 4.0.0
Oracle Mysql	Version 4.0.10
Oracle Mysql	Version 4.0.11
Oracle Mysql	Version 4.0.11 gamma
Oracle Mysql	Version 4.0.12
Oracle Mysql	Version 4.0.13
Oracle Mysql	Version 4.0.14
Oracle Mysql	Version 4.0.15
Oracle Mysql	Version 4.0.18
Oracle Mysql	Version 4.0.1
Oracle Mysql	Version 4.0.20
Oracle Mysql	Version 4.0.21
Oracle Mysql	Version 4.0.24
Oracle Mysql	Version 4.0.2
Oracle Mysql	Version 4.0.3
Oracle Mysql	Version 4.0.4
Oracle Mysql	Version 4.0.5
Oracle Mysql	Version 4.0.5a
Oracle Mysql	Version 4.0.6
Oracle Mysql	Version 4.0.7
Oracle Mysql	Version 4.0.7 gamma
Oracle Mysql	Version 4.0.8
Oracle Mysql	Version 4.0.8 gamma
Oracle Mysql	Version 4.0.9
Oracle Mysql	Version 4.0.9 gamma
Oracle Mysql	Version 4.1.0 alpha
Oracle Mysql	Version 4.1.2 alpha
Oracle Mysql	Version 4.1.3 beta
Oracle Mysql	Version 4.1.4
Oracle Mysql	Version 4.1.5
Oracle Mysql	Version 5.0.0 alpha