CVE-2004-0957: Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose n...

Security readout for executives and security teams

CVE-2004-0957 describes a MySQL privilege-handling flaw. A local user with rights to a database containing an underscore in its name could receive unintended rights over similarly named databases. That can expose data or administrative actions outside the user’s intended database scope. Exposure is likely limited to legacy MySQL 3.23.58 or earlier deployments, especially systems with local users, database names containing underscores, and multiple similarly named databases. Modern exposure cannot be inferred from the supplied sources. Prioritize this where legacy MySQL remains in production or regulated environments. The issue is old and exploitation evidence is not supplied, but unauthorized cross-database access can matter if obsolete systems still hold sensitive data. Mitigation focus: Identify and retire MySQL 3.23.58 and earlier deployments.; Apply relevant vendor or distribution MySQL security updates.; Review databases with underscores and similarly named databases..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.