PT-2010-1641 · Mysql Server · Mysql Connector/Net

Wes Henderson · Published 2010-04-29 · Updated 2017-08-17 · CVE-2009-4833

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions MySQL Connector/NET versions prior to 6.0.4

Description The issue allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate because it does not verify SSL certificates during connection when using encryption.

Recommendations For versions prior to 6.0.4, update to version 6.0.4 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-4833

Affected Products

Mysql Connector/Net

References · 6

• 🔥 http://bugs.mysql.com/bug.php?id=38700 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4833 · Security Note
• http://secunia.com/advisories/35604 · Vendor Advisory
• http://securitytracker.com/id?1022482 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51406 · Note
• http://securityfocus.com/bid/35514 · Note