CVE-2004-0957

Published: Feb 9, 2005Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

Affected (99)

Products: Openpkg: Openpkg · Oracle: Mysql · Redhat: Enterprise Linux, Enterprise Linux Desktop · +3 more

Show all products

Openpkg: Openpkg · Oracle: Mysql · Redhat: Enterprise Linux, Enterprise Linux Desktop · Suse: Suse Linux · Trustix: Secure Linux · Ubuntu: Ubuntu Linux

1 product

1 product

2 products

Enterprise Linux Desktop

1 product

1 product

1 product

Configuration A

83 vulnerable

Vulnerable Software	Affected Versions
Openpkg Openpkg	Version 2.1
Openpkg Openpkg	Version 2.2
Openpkg Openpkg	Version current
Oracle Mysql	Version 3.20.32a
Oracle Mysql	Version 3.20
Oracle Mysql	Version 3.21
Oracle Mysql	Version 3.22.26
Oracle Mysql	Version 3.22.27
Oracle Mysql	Version 3.22.28
Oracle Mysql	Version 3.22.29
Oracle Mysql	Version 3.22.30
Oracle Mysql	Version 3.22.32
Oracle Mysql	Version 3.22
Oracle Mysql	Version 3.23.10
Oracle Mysql	Version 3.23.22
Oracle Mysql	Version 3.23.23
Oracle Mysql	Version 3.23.24
Oracle Mysql	Version 3.23.25
Oracle Mysql	Version 3.23.26
Oracle Mysql	Version 3.23.27
Oracle Mysql	Version 3.23.28
Oracle Mysql	Version 3.23.28 gamma
Oracle Mysql	Version 3.23.29
Oracle Mysql	Version 3.23.2
Oracle Mysql	Version 3.23.30
Oracle Mysql	Version 3.23.31
Oracle Mysql	Version 3.23.32
Oracle Mysql	Version 3.23.33
Oracle Mysql	Version 3.23.34
Oracle Mysql	Version 3.23.36
Oracle Mysql	Version 3.23.37
Oracle Mysql	Version 3.23.38
Oracle Mysql	Version 3.23.39
Oracle Mysql	Version 3.23.3
Oracle Mysql	Version 3.23.40
Oracle Mysql	Version 3.23.41
Oracle Mysql	Version 3.23.42
Oracle Mysql	Version 3.23.43
Oracle Mysql	Version 3.23.44
Oracle Mysql	Version 3.23.45
Oracle Mysql	Version 3.23.46
Oracle Mysql	Version 3.23.47
Oracle Mysql	Version 3.23.48
Oracle Mysql	Version 3.23.49
Oracle Mysql	Version 3.23.4
Oracle Mysql	Version 3.23.50
Oracle Mysql	Version 3.23.51
Oracle Mysql	Version 3.23.52
Oracle Mysql	Version 3.23.53
Oracle Mysql	Version 3.23.53a
Oracle Mysql	Version 3.23.54
Oracle Mysql	Version 3.23.54a
Oracle Mysql	Version 3.23.55
Oracle Mysql	Version 3.23.56
Oracle Mysql	Version 3.23.58
Oracle Mysql	Version 3.23.59
Oracle Mysql	Version 3.23.5
Oracle Mysql	Version 3.23.8
Oracle Mysql	Version 3.23.9
Oracle Mysql	Version 3.23
Oracle Mysql	Version 4.0.0
Oracle Mysql	Version 4.0.10
Oracle Mysql	Version 4.0.11
Oracle Mysql	Version 4.0.11 gamma
Oracle Mysql	Version 4.0.12
Oracle Mysql	Version 4.0.13
Oracle Mysql	Version 4.0.14
Oracle Mysql	Version 4.0.15
Oracle Mysql	Version 4.0.18
Oracle Mysql	Version 4.0.1
Oracle Mysql	Version 4.0.20
Oracle Mysql	Version 4.0.2
Oracle Mysql	Version 4.0.3
Oracle Mysql	Version 4.0.4
Oracle Mysql	Version 4.0.5
Oracle Mysql	Version 4.0.5a
Oracle Mysql	Version 4.0.6
Oracle Mysql	Version 4.0.7
Oracle Mysql	Version 4.0.7 gamma
Oracle Mysql	Version 4.0.8
Oracle Mysql	Version 4.0.8 gamma
Oracle Mysql	Version 4.0.9
Oracle Mysql	Version 4.0.9 gamma

Configuration B

16 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux	Version 3.0
Redhat Enterprise Linux Desktop	Version 3.0
Suse Suse Linux	Version 8.0
Suse Suse Linux	Version 8.1
Suse Suse Linux	Version 8.2
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.0
Suse Suse Linux	Version 9.1
Suse Suse Linux	Version 9.2
Trustix Secure Linux	Version 1.5
Trustix Secure Linux	Version 2.0
Trustix Secure Linux	Version 2.1
Ubuntu Ubuntu Linux	Version 4.1
Ubuntu Ubuntu Linux	Version 4.1