CVE-2004-0835: Debian Linux

High severity, CVSS 7.5. EPSS: 22.4% chance of exploitation in the next 30 days.

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

Affected products

• Debian Debian Linux: version 3.0 only
• MySQL MySQL: from 4.1.0, up to and including 4.1.2; from 5.0.0, up to and including 5.0.1
• Oracle MySQL: after 3.20, before 3.23.59 (fixed in 3.23.59); from 4.0.0, before 4.0.19 (fixed in 4.0.19)

Published 2004-11-03. Last modified 2026-06-16.