CVE-2004-0957: Openpkg

Medium severity, CVSS 6.8. EPSS: 2.4% chance of exploitation in the next 30 days.

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

Affected products

• Openpkg Openpkg: version 2.1 only; version 2.2 only; version current only
• Oracle MySQL: version 3.20 only; version 3.20.32a only; version 3.21 only; version 3.22 only; version 3.22.26 only; version 3.22.27 only; …
• Red Hat Enterprise Linux: version 3.0 only
• Red Hat Enterprise Linux Desktop: version 3.0 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only
• Trustix Secure Linux: version 1.5 only; version 2.0 only; version 2.1 only
• Ubuntu Ubuntu Linux: version 4.1 only

Published 2005-02-09. Last modified 2026-06-16.