7.5

CVE-2004-0835

Exploit
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mysql ≫ Mysql Version >= 4.1.0 <= 4.1.2
Mysql ≫ Mysql Version >= 5.0.0 <= 5.0.1
Oracle ≫ Mysql Version > 3.20 < 3.23.59
Oracle ≫ Mysql Version >= 4.0.0 < 4.0.19
Debian ≫ Debian Linux Version3.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 22.35% 0.974
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.ciac.org/ciac/bulletins/p-018.shtml
Broken Link
http://www.redhat.com/support/errata/RHSA-2004-597.html
Patch
Vendor Advisory
http://bugs.mysql.com/bug.php?id=3270
Vendor Advisory
Exploit
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892
Broken Link
http://lists.mysql.com/internals/13073
Vendor Advisory
http://secunia.com/advisories/12783/
Patch
Vendor Advisory
http://securitytracker.com/id?1011606
Third Party Advisory
VDB Entry
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
Broken Link
http://www.debian.org/security/2004/dsa-562
Patch
Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml
Patch
Vendor Advisory
http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html
Vendor Advisory
http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2004-611.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11357
Patch
Third Party Advisory
Vendor Advisory
Exploit
VDB Entry
http://www.trustix.org/errata/2004/0054/
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17666
Third Party Advisory
VDB Entry