CVE-2004-0957 (CNNVD-200502-014)
MEDIUM
中文标题:
Oracle MySQL 安全漏洞
英文标题:
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database ...
CVSS分数:
6.8
发布时间:
2004-10-21 04:00:00
漏洞类型:
其他
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。 Oracle MySQL 3.23.58及之前版本中存在安全漏洞，当本地用户对名称中含有"_"(下划线)的数据库拥有特权时，可对具有类似名称的其他数据库授予特权，这可让用户执行未经授权的活动。
英文描述:
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.
CWE类型:
（暂无数据）
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| openpkg | openpkg | 2.1 | - | - |
cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*
|
| openpkg | openpkg | 2.2 | - | - |
cpe:2.3:a:openpkg:openpkg:2.2:*:*:*:*:*:*:*
|
| openpkg | openpkg | current | - | - |
cpe:2.3:a:openpkg:openpkg:current:*:*:*:*:*:*:*
|
| oracle | mysql | 3.20 | - | - |
cpe:2.3:a:oracle:mysql:3.20:*:*:*:*:*:*:*
|
| oracle | mysql | 3.20.32a | - | - |
cpe:2.3:a:oracle:mysql:3.20.32a:*:*:*:*:*:*:*
|
| oracle | mysql | 3.21 | - | - |
cpe:2.3:a:oracle:mysql:3.21:*:*:*:*:*:*:*
|
| oracle | mysql | 3.22 | - | - |
cpe:2.3:a:oracle:mysql:3.22:*:*:*:*:*:*:*
|
| oracle | mysql | 3.22.26 | - | - |
cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*
|
| oracle | mysql | 3.22.27 | - | - |
cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*
|
| oracle | mysql | 3.22.28 | - | - |
cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*
|
| oracle | mysql | 3.22.29 | - | - |
cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*
|
| oracle | mysql | 3.22.30 | - | - |
cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*
|
| oracle | mysql | 3.22.32 | - | - |
cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23 | - | - |
cpe:2.3:a:oracle:mysql:3.23:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.2 | - | - |
cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.3 | - | - |
cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.4 | - | - |
cpe:2.3:a:oracle:mysql:3.23.4:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.5 | - | - |
cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.8 | - | - |
cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.9 | - | - |
cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.10 | - | - |
cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.22 | - | - |
cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.23 | - | - |
cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.24 | - | - |
cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.25 | - | - |
cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.26 | - | - |
cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.27 | - | - |
cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.28 | - | - |
cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.29 | - | - |
cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.30 | - | - |
cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.31 | - | - |
cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.32 | - | - |
cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.33 | - | - |
cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.34 | - | - |
cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.36 | - | - |
cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.37 | - | - |
cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.38 | - | - |
cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.39 | - | - |
cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.40 | - | - |
cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.41 | - | - |
cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.42 | - | - |
cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.43 | - | - |
cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.44 | - | - |
cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.45 | - | - |
cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.46 | - | - |
cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.47 | - | - |
cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.48 | - | - |
cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.49 | - | - |
cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.50 | - | - |
cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.51 | - | - |
cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.52 | - | - |
cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.53 | - | - |
cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.53a | - | - |
cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.54 | - | - |
cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.54a | - | - |
cpe:2.3:a:oracle:mysql:3.23.54a:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.55 | - | - |
cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.56 | - | - |
cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.58 | - | - |
cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:*
|
| oracle | mysql | 3.23.59 | - | - |
cpe:2.3:a:oracle:mysql:3.23.59:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.0 | - | - |
cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.1 | - | - |
cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.2 | - | - |
cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.3 | - | - |
cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.4 | - | - |
cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.5 | - | - |
cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.5a | - | - |
cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.6 | - | - |
cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.7 | - | - |
cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.8 | - | - |
cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.9 | - | - |
cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.10 | - | - |
cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.11 | - | - |
cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.12 | - | - |
cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.13 | - | - |
cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.14 | - | - |
cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.15 | - | - |
cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.18 | - | - |
cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*
|
| oracle | mysql | 4.0.20 | - | - |
cpe:2.3:a:oracle:mysql:4.0.20:*:*:*:*:*:*:*
|
| redhat | enterprise_linux | 3.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*
|
| redhat | enterprise_linux_desktop | 3.0 | - | - |
cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
|
| suse | suse_linux | 8.0 | - | - |
cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*
|
| suse | suse_linux | 8.1 | - | - |
cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*
|
| suse | suse_linux | 8.2 | - | - |
cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
|
| suse | suse_linux | 9.0 | - | - |
cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
|
| suse | suse_linux | 9.1 | - | - |
cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*
|
| suse | suse_linux | 9.2 | - | - |
cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*
|
| trustix | secure_linux | 1.5 | - | - |
cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*
|
| trustix | secure_linux | 2.0 | - | - |
cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*
|
| trustix | secure_linux | 2.1 | - | - |
cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*
|
| ubuntu | ubuntu_linux | 4.1 | - | - |
cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
mysql-underscore-gain-priv(17783)
vdb-entry
cve.org
访问
cve.org
CLA-2005:947
vendor-advisory
cve.org
访问
cve.org
RHSA-2004:611
vendor-advisory
cve.org
访问
cve.org
DSA-707
vendor-advisory
cve.org
访问
cve.org
MDKSA-2005:070
vendor-advisory
cve.org
访问
cve.org
USN-32-1
vendor-advisory
cve.org
访问
cve.org
RHSA-2004:597
vendor-advisory
cve.org
访问
cve.org
P-018
third-party-advisory
cve.org
访问
cve.org
CVSS评分详情
6.8
MEDIUM
CVSS向量:
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS版本:
2.0
机密性
PARTIAL
完整性
PARTIAL
可用性
PARTIAL
时间信息
发布时间:
2004-10-21 04:00:00
修改时间:
2024-08-08 00:31:48
创建时间:
2025-11-11 15:32:21
更新时间:
2025-11-11 15:48:57
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2004-0957 |
2025-11-11 15:17:29 | 2025-11-11 07:32:21 |
| NVD | nvd_CVE-2004-0957 |
2025-11-11 14:50:56 | 2025-11-11 07:41:08 |
| CNNVD | cnnvd_CNNVD-200502-014 |
2025-11-11 15:08:46 | 2025-11-11 07:48:57 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 15:48:57
vulnerability_type: 未提取 → 其他; cnnvd_id: 未提取 → CNNVD-200502-014; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-200502-014
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:41:08
cvss_score: 未提取 → 6.8; cvss_vector: NOT_EXTRACTED → AV:N/AC:M/Au:N/C:P/I:P/A:P; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 90; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 6.8
- cvss_vector: NOT_EXTRACTED -> AV:N/AC:M/Au:N/C:P/I:P/A:P
- cvss_version: NOT_EXTRACTED -> 2.0
- affected_products_count: 0 -> 90
- data_sources: ['cve'] -> ['cve', 'nvd']