Zero-friction vulnerability management platform

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

CVE-2004-0957

CVE information

Published

17 years ago

Last Modified

2 years ago

CVSSv2.0 Severity

Medium

Impact Analysis

Description

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities..

CVSSv2.0 Score

Severity
Medium
Base Score
6.8/10
Exploit Score
8.6/10
Access Vector
Network
Access Complexity
Medium
Authentication Required
None
Impact Score
6.4/10
Confidentiality Impact
Partial
Availability Impact
Partial
Integrity Impact
Partial

Products Affected

CPE Affected Vulnerable Excluding Edit
cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:openpkg:openpkg:current:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:openpkg:openpkg:2.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.20:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.20.32a:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.21:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.22:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.54a:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:3.23.59:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*
  Yes
- -
cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*
  Yes
- -
cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*
  Yes
- -
cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*
  Yes
- -
cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:
  Yes
- -
cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:
  Yes
- -
cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*
  Yes
- -