6 matches found
EUVD-2009-4796
Malware in sbrugna...
UBUNTU-CVE-2018-2585
Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Net. Supported versions that are affected are 6.9.9 and prior and 6.10.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MyS...
CVE-2017-10277
Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Net. Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors...
MySQL Connector/Net SSL Certificate Validation Security Bypass Vulnerability
This host is installed with MySQL Connector/Net and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbmysqlconnectornetsslcertsecbypassvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ MySQL Connector/Net SSL Certificate Validation Security Bypass Vulnerability Authors: Sooraj ...
Code injection
MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate...
MySQL Connector/NET缺少SSL证书验证漏洞
BUGTRAQ ID: 35514 MySQL Connector/Net是MySQL数据库的ADO.NET驱动。 MySQL Connector/Net在使用加密的时候没有对服务器的证书执行验证。在NativeDriver.cs文件中,StartSSL函数依赖于名为 NoServerCheckValidation的验证函数,而该函数没有执行任何验证。此外还有另一个名为ServerCheckValidation 的函数,而该函数被标注掉。 能够对连接执行中间人攻击的攻击者可以通过利用这个漏洞绕过加密验证,从而破坏SSL所提供的安全性。 MySQL AB MySQL Connector/N...