PT-2002-2642 · Mysql Server · Mysql Server

Publicado 2002-12-31 · Atualizado 2019-10-07 · CVE-2002-1921

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQL versions 3.20.32 through 3.23.52

Description The default configuration of MySQL, when running on Windows, does not set the bind address to the loopback interface by default in the specified versions, which allows remote attackers to connect to the database.

Recommendations For MySQL versions 3.20.32 through 3.23.52, consider updating the configuration to bind the MySQL server to the loopback interface to prevent remote connections.

Correção

Identificadores relacionados

CVE-2002-1921

Produtos afetados

Mysql Server

Referências · 4

• http://iss.net/security_center/static/9908.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1921 · Nota de Segurança
• http://online.securityfocus.com/archive/1/288105 · Nota
• http://securityfocus.com/bid/5511 · Nota