CVE

Id
9263  
CVE No.
CVE-2004-0835  
Status
Candidate  
Description
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.  
Phase
Assigned (20040908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61241 9263 CVE-2004-0835 CONFIRM:http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html  View
61242 9263 CVE-2004-0835 CONFIRM:http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html  View
61243 9263 CVE-2004-0835 CONECTIVA:CLA-2004:892  View
61244 9263 CVE-2004-0835 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892  View
61245 9263 CVE-2004-0835 DEBIAN:DSA-562  View
61246 9263 CVE-2004-0835 URL:http://www.debian.org/security/2004/dsa-562  View
61247 9263 CVE-2004-0835 GENTOO:GLSA-200410-22  View
61248 9263 CVE-2004-0835 URL:http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml  View
61249 9263 CVE-2004-0835 REDHAT:RHSA-2004:597  View
61250 9263 CVE-2004-0835 URL:http://www.redhat.com/support/errata/RHSA-2004-597.html  View
61251 9263 CVE-2004-0835 REDHAT:RHSA-2004:611  View
61252 9263 CVE-2004-0835 URL:http://www.redhat.com/support/errata/RHSA-2004-611.html  View
61253 9263 CVE-2004-0835 SUNALERT:101864  View
61254 9263 CVE-2004-0835 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1  View
61255 9263 CVE-2004-0835 TRUSTIX:2004-0054  View
61256 9263 CVE-2004-0835 URL:http://www.trustix.org/errata/2004/0054/  View
61257 9263 CVE-2004-0835 MISC:http://bugs.mysql.com/bug.php?id=3270  View
61258 9263 CVE-2004-0835 MISC:http://lists.mysql.com/internals/13073  View
61259 9263 CVE-2004-0835 CIAC:P-018  View
61260 9263 CVE-2004-0835 URL:http://www.ciac.org/ciac/bulletins/p-018.shtml  View
61261 9263 CVE-2004-0835 SECUNIA:12783  View
61262 9263 CVE-2004-0835 URL:http://secunia.com/advisories/12783/  View
61263 9263 CVE-2004-0835 SECTRACK:1011606  View
61264 9263 CVE-2004-0835 URL:http://securitytracker.com/id?1011606  View
61265 9263 CVE-2004-0835 BID:11357  View
61266 9263 CVE-2004-0835 URL:http://www.securityfocus.com/bid/11357  View
61267 9263 CVE-2004-0835 XF:mysql-alter-restriction-bypass(17666)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62757 JVNDB-2004-000098 MySQL の mysql_real_connect() 関数におけるバッファオーバーフローの脆弱性 ------------ CVE-2004-0836 9263 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000098.html  View