QwikSec

Security Database

CVE

CWE

Training

CVE-2004-0835

Published: Oct 16, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://bugs.mysql.com/bug.php?id=3270

x_refsource_MISC

http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html

x_refsource_CONFIRM

vendor-advisory

x_refsource_REDHAT

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_DEBIAN

vendor-advisory

x_refsource_SUNALERT

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_CONECTIVA

http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html

x_refsource_CONFIRM

mysql-alter-restriction-bypass(17666)

vdb-entry

x_refsource_XF

vendor-advisory

x_refsource_REDHAT

third-party-advisory

government-resource

x_refsource_CIAC

vendor-advisory

x_refsource_GENTOO

vendor-advisory

x_refsource_TRUSTIX

http://lists.mysql.com/internals/13073

x_refsource_MISC

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.