CVE

Id
9385  
CVE No.
CVE-2004-0957  
Status
Candidate  
Description
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.  
Phase
Assigned (20041013)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62602 9385 CVE-2004-0957 CONECTIVA:CLA-2005:947  View
62603 9385 CVE-2004-0957 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947  View
62604 9385 CVE-2004-0957 DEBIAN:DSA-707  View
62605 9385 CVE-2004-0957 URL:http://www.debian.org/security/2005/dsa-707  View
62606 9385 CVE-2004-0957 MANDRAKE:MDKSA-2005:070  View
62607 9385 CVE-2004-0957 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:070  View
62608 9385 CVE-2004-0957 REDHAT:RHSA-2004:597  View
62609 9385 CVE-2004-0957 URL:http://www.redhat.com/support/errata/RHSA-2004-597.html  View
62610 9385 CVE-2004-0957 REDHAT:RHSA-2004:611  View
62611 9385 CVE-2004-0957 URL:http://www.redhat.com/support/errata/RHSA-2004-611.html  View
62612 9385 CVE-2004-0957 UBUNTU:USN-32-1  View
62613 9385 CVE-2004-0957 URL:https://www.ubuntu.com/usn/usn-32-1/  View
62614 9385 CVE-2004-0957 CIAC:P-018  View
62615 9385 CVE-2004-0957 URL:http://www.ciac.org/ciac/bulletins/p-018.shtml  View
62616 9385 CVE-2004-0957 XF:mysql-underscore-gain-priv(17783)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63061 JVNDB-2004-000403 PHP の php_variables.c におけるメモリリークの脆弱性 ------------ CVE-2004-0958 9385 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000403.html  View