PT-2007-4823 · Mysql Server · Mysqldumper

Published 2007-07-05 · Updated 2018-10-30 · CVE-2007-3567

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQLDumper versions 1.21b through 1.23 REV227

Description The issue allows remote attackers to bypass authentication requirements via HTTP POST requests due to the use of a "Limit GET" statement in the .htaccess authentication mechanism.

Recommendations For versions 1.21b through 1.23 REV227, consider modifying the .htaccess file to properly restrict access to both GET and POST requests as a temporary workaround. Restrict access to the authentication mechanism to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-3567

Affected Products

Mysqldumper

References · 8

• 🔥 http://securityfocus.com/bid/24759 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3567 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3567 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35291 · Note
• http://securityfocus.com/archive/1/472756/100/0/threaded · Note
• http://archives.neohapsis.com/archives/bugtraq/2007-08/0052.html · Note
• http://osvdb.org/42460 · Note
• http://securityreason.com/securityalert/2859 · Note