CVE-2004-0835

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the…

published October 16, 2004

CVSS
—
EPSS
22%
Percentile
97.7
In the wild
Unconfirmed
What it is

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.22352 · 97.7th percentile
Published
2004-10-16T04:00Z
EPSS history
Timeline
  • 16 OCT 04:00Z
    MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the…
    cvelistv5