Description

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

Remediation

References

CVE-2004-0957

Related Vulnerabilities

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-27889)

Vanilla Forums Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4954)

OpenSSL Improper Certificate Validation Vulnerability (CVE-2021-3450)

b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5911)

Squid NULL Pointer Dereference Vulnerability (CVE-2018-1000027)

Severity

Medium

Classification

CVE-2004-0957

Tags

Missing Update Known Vulnerabilities