Lucene search

K
cve[email protected]CVE-2002-1921
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-1921

2022-10-0316:23:49
web.nvd.nist.gov
20
mysql
windows
cve-2002-1921
security vulnerability
database
remote attack

6.7 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.7%

The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.

Affected configurations

NVD
Node
oraclemysqlMatch3.20.32a
OR
oraclemysqlMatch3.22.26
OR
oraclemysqlMatch3.22.27
OR
oraclemysqlMatch3.22.28
OR
oraclemysqlMatch3.22.29
OR
oraclemysqlMatch3.22.30
OR
oraclemysqlMatch3.22.32
OR
oraclemysqlMatch3.23.2
OR
oraclemysqlMatch3.23.3
OR
oraclemysqlMatch3.23.4
OR
oraclemysqlMatch3.23.5
OR
oraclemysqlMatch3.23.8
OR
oraclemysqlMatch3.23.9
OR
oraclemysqlMatch3.23.10
OR
oraclemysqlMatch3.23.23
OR
oraclemysqlMatch3.23.24
OR
oraclemysqlMatch3.23.25
OR
oraclemysqlMatch3.23.26
OR
oraclemysqlMatch3.23.27
OR
oraclemysqlMatch3.23.28
OR
oraclemysqlMatch3.23.28gamma
OR
oraclemysqlMatch3.23.29
OR
oraclemysqlMatch3.23.30
OR
oraclemysqlMatch3.23.31
OR
oraclemysqlMatch3.23.34
OR
oraclemysqlMatch3.23.36
OR
oraclemysqlMatch3.23.37
OR
oraclemysqlMatch3.23.38
OR
oraclemysqlMatch3.23.39
OR
oraclemysqlMatch3.23.40
OR
oraclemysqlMatch3.23.41
OR
oraclemysqlMatch3.23.42
OR
oraclemysqlMatch3.23.43
OR
oraclemysqlMatch3.23.44
OR
oraclemysqlMatch3.23.45
OR
oraclemysqlMatch3.23.46
OR
oraclemysqlMatch3.23.47
OR
oraclemysqlMatch3.23.48
OR
oraclemysqlMatch3.23.49
OR
oraclemysqlMatch3.23.50
OR
oraclemysqlMatch3.23.51
OR
oraclemysqlMatch3.23.52

6.7 Medium

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.7%

Related for CVE-2002-1921