| Package | Affected versions | Patched versions |
|---|---|---|
| mysql | = 4.1.0= 4.1.10= 4.1.3= 5.0.1= 5.0.2= 5.0.3= 5.0.4 | |
| mysql | = 4.0.0= 4.0.1= 4.0.10= 4.0.11= 4.0.12= 4.0.13= 4.0.14= 4.0.15= 4.0.18= 4.0.2= 4.0.20= 4.0.21= 4.0.24= 4.0.3= 4.0.4= 4.0.5= 4.0.5a= 4.0.6= 4.0.7= 4.0.8= 4.0.9= 4.1.0= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 5.0.0 |
The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traversal check, which allows attackers to include arbitrary files via the backslash (\) character.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free