CVE-2004-0957: Medium severity Openpkg Openpkg vulnerability
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0957?
CVE-2004-0957 is considered to be a medium severity vulnerability due to its potential for unauthorized access to multiple databases by local users with specific privileges.
How do I fix CVE-2004-0957?
To address CVE-2004-0957, upgrade MySQL to a version later than 3.23.58, which resolves this privilege escalation issue.
Who is affected by CVE-2004-0957?
CVE-2004-0957 affects all local users with privileges on databases that include an underscore in the name across several versions of MySQL and OpenPKG.
What types of databases does CVE-2004-0957 affect?
CVE-2004-0957 affects MySQL databases where names include an underscore, potentially allowing unauthorized actions on similarly named databases.
Is there a workaround for CVE-2004-0957?
A potential workaround for CVE-2004-0957 is to rename databases to eliminate underscores, but upgrading to a secure version is the recommended solution.