NVD

Id
71359  
Name
CVE-2004-0957  
Description
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-02-09  
Modified Date
2017-07-10  
Seq
2004-0957  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
368875 71359 CVE-2004-0957 CLA-2005:947  View
368876 71359 CVE-2004-0957 P-018  View
368877 71359 CVE-2004-0957 DSA-707  View
368878 71359 CVE-2004-0957 MDKSA-2005:070  View
368879 71359 CVE-2004-0957 RHSA-2004:597  View
368880 71359 CVE-2004-0957 RHSA-2004:611  View
368881 71359 CVE-2004-0957 mysql-underscore-gain-priv(17783)  View
368882 71359 CVE-2004-0957 USN-32-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62759 JVNDB-2004-000100 MySQL におけるアンダースコアを名前に含むデータベースにより不正に権限を与えてしまう脆弱性 ------------ CVE-2004-0957 9384 CVE-2004-0957 71359 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000100.html 2004-03-23 2007-04-01 View