Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-0957

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

Published

2005-02-09T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application openpkg openpkg 2.1 Yes
Application openpkg openpkg 2.2 Yes
Application openpkg openpkg current Yes
Application oracle mysql 3.20 Yes
Application oracle mysql 3.20.32a Yes
Application oracle mysql 3.21 Yes
Application oracle mysql 3.22 Yes
Application oracle mysql 3.22.26 Yes
Application oracle mysql 3.22.27 Yes
Application oracle mysql 3.22.28 Yes
Application oracle mysql 3.22.29 Yes
Application oracle mysql 3.22.30 Yes
Application oracle mysql 3.22.32 Yes
Application oracle mysql 3.23 Yes
Application oracle mysql 3.23.2 Yes
Application oracle mysql 3.23.3 Yes
Application oracle mysql 3.23.4 Yes
Application oracle mysql 3.23.5 Yes
Application oracle mysql 3.23.8 Yes
Application oracle mysql 3.23.9 Yes
Application oracle mysql 3.23.10 Yes
Application oracle mysql 3.23.22 Yes
Application oracle mysql 3.23.23 Yes
Application oracle mysql 3.23.24 Yes
Application oracle mysql 3.23.25 Yes
Application oracle mysql 3.23.26 Yes
Application oracle mysql 3.23.27 Yes
Application oracle mysql 3.23.28 Yes
Application oracle mysql 3.23.28 Yes
Application oracle mysql 3.23.29 Yes
Application oracle mysql 3.23.30 Yes
Application oracle mysql 3.23.31 Yes
Application oracle mysql 3.23.32 Yes
Application oracle mysql 3.23.33 Yes
Application oracle mysql 3.23.34 Yes
Application oracle mysql 3.23.36 Yes
Application oracle mysql 3.23.37 Yes
Application oracle mysql 3.23.38 Yes
Application oracle mysql 3.23.39 Yes
Application oracle mysql 3.23.40 Yes
Application oracle mysql 3.23.41 Yes
Application oracle mysql 3.23.42 Yes
Application oracle mysql 3.23.43 Yes
Application oracle mysql 3.23.44 Yes
Application oracle mysql 3.23.45 Yes
Application oracle mysql 3.23.46 Yes
Application oracle mysql 3.23.47 Yes
Application oracle mysql 3.23.48 Yes
Application oracle mysql 3.23.49 Yes
Application oracle mysql 3.23.50 Yes
Application oracle mysql 3.23.51 Yes
Application oracle mysql 3.23.52 Yes
Application oracle mysql 3.23.53 Yes
Application oracle mysql 3.23.53a Yes
Application oracle mysql 3.23.54 Yes
Application oracle mysql 3.23.54a Yes
Application oracle mysql 3.23.55 Yes
Application oracle mysql 3.23.56 Yes
Application oracle mysql 3.23.58 Yes
Application oracle mysql 3.23.59 Yes
Application oracle mysql 4.0.0 Yes
Application oracle mysql 4.0.1 Yes
Application oracle mysql 4.0.2 Yes
Application oracle mysql 4.0.3 Yes
Application oracle mysql 4.0.4 Yes
Application oracle mysql 4.0.5 Yes
Application oracle mysql 4.0.5a Yes
Application oracle mysql 4.0.6 Yes
Application oracle mysql 4.0.7 Yes
Application oracle mysql 4.0.7 Yes
Application oracle mysql 4.0.8 Yes
Application oracle mysql 4.0.8 Yes
Application oracle mysql 4.0.9 Yes
Application oracle mysql 4.0.9 Yes
Application oracle mysql 4.0.10 Yes
Application oracle mysql 4.0.11 Yes
Application oracle mysql 4.0.11 Yes
Application oracle mysql 4.0.12 Yes
Application oracle mysql 4.0.13 Yes
Application oracle mysql 4.0.14 Yes
Application oracle mysql 4.0.15 Yes
Application oracle mysql 4.0.18 Yes
Application oracle mysql 4.0.20 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux 3.0 Yes
Operating System redhat enterprise_linux_desktop 3.0 Yes
Operating System suse suse_linux 8.0 Yes
Operating System suse suse_linux 8.1 Yes
Operating System suse suse_linux 8.2 Yes
Operating System suse suse_linux 9.0 Yes
Operating System suse suse_linux 9.0 Yes
Operating System suse suse_linux 9.1 Yes
Operating System suse suse_linux 9.2 Yes
Operating System trustix secure_linux 1.5 Yes
Operating System trustix secure_linux 2.0 Yes
Operating System trustix secure_linux 2.1 Yes
Operating System ubuntu ubuntu_linux 4.1 Yes
Operating System ubuntu ubuntu_linux 4.1 Yes
References