CVE ID:	CAN-2005-0709
Description:	MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0709 http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html BugTraq ID: 12781 http://www.securityfocus.com/bid/12781 Bugtraq: 20050310 Mysql CREATE FUNCTION libc arbitrary code execution. (Google Search) http://marc.info/?l=bugtraq&m=111066115808506&w=2 Debian Security Information: DSA-707 (Google Search) http://www.debian.org/security/2005/dsa-707 http://www.gentoo.org/security/en/glsa/glsa-200503-19.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:060 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10479 RedHat Security Advisories: RHSA-2005:334 http://www.redhat.com/support/errata/RHSA-2005-334.html RedHat Security Advisories: RHSA-2005:348 http://www.redhat.com/support/errata/RHSA-2005-348.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 SuSE Security Announcement: SUSE-SA:2005:019 (Google Search) http://www.novell.com/linux/security/advisories/2005_19_mysql.html http://www.trustix.org/errata/2005/0009/ https://usn.ubuntu.com/96-1/ http://archives.neohapsis.com/archives/vulnwatch/2005-q1/0084.html