CVE-2004-0957

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

Score
CVSS 2.0 6.8 Medium
Status
Modified - cve@mitre.org
Published
2005-02-09
Last modified
2024-08-08

Affected products

References

 
 
© AVABIS GmbH privacypolicy about