Evil-DB LogoEvil-DB
← All CVEs

CVE-2004-0835

high · 7.5

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

7.5
CVSS
22.4%
EPSS (exploit prob.)
98th
EPSS percentile
2004-11-03
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
mysqlmysql>= 4.1.0, <= 4.1.2
mysqlmysql>= 5.0.0, <= 5.0.1
oraclemysql> 3.20, < 3.23.59
oraclemysql>= 4.0.0, < 4.0.19
debiandebian_linux3.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0835