Description

The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.

Remediation

References

CVE-2002-1921

Related Vulnerabilities

WordPress Plugin Advanced Contact form 7 DB SQL Injection (1.6.1)

WordPress Plugin AccessAlly Information Disclosure (3.5.6)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.2.2)

WordPress Plugin Open Graph for Facebook, Google+ and Twitter Card Tags Cross-Site Scripting (2.2.4)

WordPress Plugin Disable Image Right Click Cross-Site Scripting (1.0)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2002-1921