PT-2002-2644 · Oracle · Mysql Server

Published 2002-12-31 · Updated 2019-10-07 · CVE-2002-1923

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQL versions 3.20.32 through 3.23.52

Description The default configuration of MySQL on Windows does not have logging enabled, which could allow remote attackers to conduct activities without detection.

Recommendations For MySQL versions 3.20.32 through 3.23.52, enable logging to detect and track potential security incidents.

Fix

Related Identifiers

CVE-2002-1923

Affected Products

Mysql Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1923 · Security Note
• http://iss.net/security_center/static/9909.php · Note
• http://online.securityfocus.com/archive/1/288105 · Note
• http://securityfocus.com/bid/5513 · Note