CVEs-PoC/2004/CVE-2004-0835.md

CVE-2004-0835

Description

MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

POC

Reference

• http://www.redhat.com/support/errata/RHSA-2004-611.html
• http://www.redhat.com/support/errata/RHSA-2004-611.html

Github

No PoCs found on GitHub currently.