A PoC exploit has been publicly disclosed, demonstrating the feasibility of the attack. The exploit involves crafting a malicious COM_CHANGE_USER packet and sending it to the MySQL server. A successful exploitation can lead to the execution of arbitrary code on the server.
The vulnerability affects MySQL version 5.0.12, which was released in 2005. It's essential to note that this version is outdated and has been superseded by newer, more secure versions. mysql 5.0.12 exploit
The MySQL 5.0.12 exploit takes advantage of a vulnerability in the database server's handling of certain SQL queries. Specifically, the vulnerability lies in the COM_CHANGE_USER command, which allows an attacker to inject malicious input, potentially leading to arbitrary code execution. A PoC exploit has been publicly disclosed, demonstrating
Find Your Perfect Property