CVE-2005-0710: MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE...

Security readout for executives and security teams

This is an old MySQL flaw where a logged-in database user with specific table privileges could bypass library path restrictions and make MySQL execute arbitrary libraries. Business risk is concentrated in legacy MySQL 4.0 and 4.1 deployments or old vendor packages still running in production. Exposure is likely limited to very old MySQL instances, embedded appliances, unmanaged legacy servers, or archived vendor distributions. The attacker must already authenticate and hold INSERT and DELETE privileges relevant to mysql.func. Prioritize remediation if legacy MySQL is internet-reachable, supports business-critical data, or permits broad database user privileges. For modern MySQL environments, priority is lower after confirming affected versions are absent. Mitigation focus: Inventory MySQL versions and vendor-packaged MySQL installations.; Upgrade or patch affected MySQL versions using applicable vendor advisories.; Review database accounts with INSERT and DELETE privileges on mysql.func..

Prepared

Jun 29, 2026, 23:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.