← Database

CVE-2004-0957

MEDIUM CVSS: 6.8 Published: 2005-02-09 Modified: 2026-06-16

Description

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

Affected Platforms

Oracle MysqlRedhat Enterprise LinuxRedhat Enterprise Linux DesktopOpenpkg OpenpkgTrustix Secure LinuxUbuntu Ubuntu LinuxSuse Suse Linux

Weakness Type

NVD-CWE-noinfo

References