Description

The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.

Remediation

References

CVE-2002-1921

Related Vulnerabilities

MyBB Improper Access Control Vulnerability (CVE-2016-9415)

Oracle JRE CVE-2013-5820 Vulnerability (CVE-2013-5820)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-2230)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.22)

WordPress Plugin SagePay Server Gateway for WooCommerce Cross-Site Scripting (1.0.8)

Severity

High

Classification

CVE-2002-1921

Tags

Missing Update Known Vulnerabilities