CVE Database
/

CVE-2004-0957

Back to search

CVE-2004-0957

Published: Oct 21, 2004

Modified: Aug 8, 2024

PUBLISHED

Description

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

VendorProductVersions

n/a

n/a

affected
n/a

References

mysql-underscore-gain-priv(17783)
vdb-entry
x_refsource_XF
CLA-2005:947
vendor-advisory
x_refsource_CONECTIVA
RHSA-2004:611
vendor-advisory
x_refsource_REDHAT
DSA-707
vendor-advisory
x_refsource_DEBIAN
MDKSA-2005:070
vendor-advisory
x_refsource_MANDRAKE
USN-32-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2004:597
vendor-advisory
x_refsource_REDHAT
P-018
third-party-advisory
government-resource
x_refsource_CIAC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now