CVE-2004-0835

2004-11-0305:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

mysql

cve-2004-0835

unauthorized activities

alter table

nvd

6.1 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.1%

JSON

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

CPENameOperatorVersion
mysql:mysqlmysqlle4.1.2
mysql:mysqlmysqlle5.0.1
oracle:mysqloracle mysqllt3.23.59
oracle:mysqloracle mysqllt4.0.19
debian:debian_linuxdebian debian linuxeq3.0

CPE	Name	Operator	Version
mysql:mysql	mysql	le	4.1.2
mysql:mysql	mysql	le	5.0.1
oracle:mysql	oracle mysql	lt	3.23.59
oracle:mysql	oracle mysql	lt	4.0.19
debian:debian_linux	debian debian linux	eq	3.0