CVE-2004-0835
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the...
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
Exploit likelihood
What each source reports
NVD Score used
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
- Record
CVE-2004-0835- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
- Record
CVE-2004-0835- Updated
- 2026-11-02
EUVDEUVD-2004-0833 No score
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
- Record
EUVD-2004-0833- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-75ph-gf88-2722 No score
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the...
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
- Record
GHSA-75ph-gf88-2722- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysqlDebian:3.0 |
before 3.23.49-8.8 | 3.23.49-8.8 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MySQL 3.x/4.x - ALTER TABLE/RENAME Forces Old Permission Checks | 2004-10-08 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0835 is a high vulnerability (CVSS 7.5) in Mysql, published October 11, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 22.4%, the 97th percentile. Fixed in mysql 3.23.49-8.8.
References
bugs.mysql.com/bug.php?id=3270
mysql.org/doc/refman/4.1/en/news-4-1-2.html
redhat.com/support/errata/RHSA-2004-611.html
secunia.com/advisories/12783
debian.org/security/2004/dsa-562
sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1
Show 12 moreShow less
securityfocus.com/bid/11357
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000892
exchange.xforce.ibmcloud.com/vulnerabilities/17666
ciac.org/ciac/bulletins/p-018.shtml
gentoo.org/security/en/glsa/glsa-200410-22.xml
trustix.org/errata/2004/0054
lists.mysql.com/internals/13073
securitytracker.com/id?1011606
nvd.nist.gov/vuln/detail/CVE-2004-0835
github.com/advisories/GHSA-75ph-gf88-2722