CVE-2004-0835: debian debian_linux
Vulnerability summary
CVE-2004-0835 is a high (CVSS 7.5) vulnerability in debian debian_linux. EPSS estimates a 22.35% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 16-10-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
22.35%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 22.35% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (bugs.mysql.com)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
MySQL 3.x/4.x - ALTER TABLE/RENAME Forces Old Permission Checks
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- debian_linuxEOL3.0
Mysql1 product
- mysql≥ 4.1.0, ≤ 4.1.2 | ≥ 5.0.0, ≤ 5.0.1
Oracle1 product
- mysql> 3.20, < 3.23.59 | ≥ 4.0.0, < 4.0.19
3 vendors · 3 products
References
16 links
- sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1Vendor AdvisoryX Refsource SUNALERTBroken Link
- www.securityfocus.com/bid/11357VDB EntryX Refsource BIDExploitPatchThird Party AdvisoryVendor Advisory
- distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892Vendor AdvisoryX Refsource CONECTIVABroken Link
Show all 16 references
- www.ciac.org/ciac/bulletins/p-018.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIACBroken Link