Description

The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.

Remediation

References

CVE-2002-1921

Related Vulnerabilities

Nginx Off-by-one Error Vulnerability (CVE-2021-23017)

Claroline Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37160)

MySQL CVE-2018-3286 Vulnerability (CVE-2018-3286)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3478)

WordPress Plugin Attachment File Icons (AF Icons) Cross-Site Request Forgery (1.3)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2002-1921