CVE-2004-0957

Description

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a _ (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

Risk Information

Base Score

6.3

MODERATE

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS Score

Exploitation Probability

0.48

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Mysql 4.0.9	Windows
Multiple vulnerabilities affected in Mysql 4.0.9 (For Linux)	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234