7.5
CVSSv2

CVE-2002-1921

Published: 31/12/2002 Updated: 07/10/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The default configuration of MySQL 3.20.32 up to and including 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote malicious users to connect to the database.

Vulnerable Product Search on Vulmon Subscribe to Product

oracle mysql 3.20.32a

oracle mysql 3.23.28

oracle mysql 3.23.29

oracle mysql 3.23.3

oracle mysql 3.23.45

oracle mysql 3.23.46

oracle mysql 3.23.47

oracle mysql 3.23.48

oracle mysql 3.22.32

oracle mysql 3.23.10

oracle mysql 3.23.2

oracle mysql 3.23.23

oracle mysql 3.23.37

oracle mysql 3.23.38

oracle mysql 3.23.39

oracle mysql 3.23.4

oracle mysql 3.23.52

oracle mysql 3.23.8

oracle mysql 3.23.9

oracle mysql 3.22.26

oracle mysql 3.22.28

oracle mysql 3.22.30

oracle mysql 3.23.24

oracle mysql 3.23.26

oracle mysql 3.23.31

oracle mysql 3.23.36

oracle mysql 3.23.40

oracle mysql 3.23.42

oracle mysql 3.23.44

oracle mysql 3.23.49

oracle mysql 3.23.50

oracle mysql 3.22.27

oracle mysql 3.22.29

oracle mysql 3.23.25

oracle mysql 3.23.27

oracle mysql 3.23.30

oracle mysql 3.23.34

oracle mysql 3.23.41

oracle mysql 3.23.43

oracle mysql 3.23.5

oracle mysql 3.23.51