Description
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.
Product(s):
- OpenPKG 2.1
- OpenPKG 2.2
- OpenPKG OpenPKG Current
- Oracle MySQL 3.20.32a
- Oracle MySQL 3.20
- Oracle MySQL 3.21
- Oracle MySQL 3.22.26
- Oracle MySQL 3.22.27
- Oracle MySQL 3.22.28
- Oracle MySQL 3.22.29
- Oracle MySQL 3.22.30
- Oracle MySQL 3.22.32
- Oracle MySQL 3.22
- Oracle MySQL 3.23.10
- Oracle MySQL 3.23.22
- Oracle MySQL 3.23.23
- Oracle MySQL 3.23.24
- Oracle MySQL 3.23.25
- Oracle MySQL 3.23.26
- Oracle MySQL 3.23.27
- Oracle MySQL 3.23.28
- Oracle MySQL 3.23.28 Gamma
- Oracle MySQL 3.23.29
- Oracle MySQL 3.23.2
- Oracle MySQL 3.23.30
- Oracle MySQL 3.23.31
- Oracle MySQL 3.23.32
- Oracle MySQL 3.23.33
- Oracle MySQL 3.23.34
- Oracle MySQL 3.23.36
- Oracle MySQL 3.23.37
- Oracle MySQL 3.23.38
- Oracle MySQL 3.23.39
- Oracle MySQL 3.23.3
- Oracle MySQL 3.23.40
- Oracle MySQL 3.23.41
- Oracle MySQL 3.23.42
- Oracle MySQL 3.23.43
- Oracle MySQL 3.23.44
- Oracle MySQL 3.23.45
- Oracle MySQL 3.23.46
- Oracle MySQL 3.23.47
- Oracle MySQL 3.23.48
- Oracle MySQL 3.23.49
- Oracle MySQL 3.23.4
- Oracle MySQL 3.23.50
- Oracle MySQL 3.23.51
- Oracle MySQL 3.23.52
- Oracle MySQL 3.23.53
- Oracle MySQL 3.23.53a
- Oracle MySQL 3.23.54
- Oracle MySQL 3.23.54a
- Oracle MySQL 3.23.55
- Oracle MySQL 3.23.56
- Oracle MySQL 3.23.58
- Oracle MySQL 3.23.59
- Oracle MySQL 3.23.5
- Oracle MySQL 3.23.8
- Oracle MySQL 3.23.9
- Oracle MySQL 3.23
- Oracle MySQL 4.0.0
- Oracle MySQL 4.0.10
- Oracle MySQL 4.0.11
- Oracle MySQL 4.0.11 Gamma
- Oracle MySQL 4.0.12
- Oracle MySQL 4.0.13
- Oracle MySQL 4.0.14
- Oracle MySQL 4.0.15
- Oracle MySQL 4.0.18
- Oracle MySQL 4.0.1
- Oracle MySQL 4.0.20
- Oracle MySQL 4.0.2
- Oracle MySQL 4.0.3
- Oracle MySQL 4.0.4
- Oracle MySQL 4.0.5
- Oracle MySQL 4.0.5a
- Oracle MySQL 4.0.6
- Oracle MySQL 4.0.7
- Oracle MySQL 4.0.7 Gamma
- Oracle MySQL 4.0.8
- Oracle MySQL 4.0.8 Gamma
- Oracle MySQL 4.0.9
- Oracle MySQL 4.0.9 Gamma
- Red Hat Enterprise Linux 3.0 Advanced Server Edition
- Red Hat Enterprise Linux 3.0 Enterprise Server Edition
- Red Hat Enterprise Linux 3.0 Workstation Server Edition
- Red Hat Desktop 3.0
- SuSE SuSE Linux 8.0
- SuSE SuSE Linux 8.0 alpha
- SuSE SuSE Linux 8.1
- SuSE SuSE Linux 8.2
- SuSE SuSE Linux 9.0
- Suse Suse Linux 9.0 Enterprise Server Edition
- SUSE Linux 9.0 x86_64
- SuSE SuSE Linux 9.1
- SuSE SuSE Linux 9.2
- Trustix Secure Linux 1.5
- Trustix Secure Linux 2.0
- Trustix Secure Linux 2.1
- Ubuntu Linux 4.1 on IA64
- +1 additional
Question to Ask Vendors:
- Can you confirm whether your systems are affected by CVE-2004-0957, and if so, what steps are you currently taking to mitigate this vulnerability?
- What is your estimated timeline for fully resolving CVE-2004-0957 in your products or services, and how will you communicate updates on this issue to us as your customer?
Recommended Actions:
- Check out the advisory links provided below.