Vulnerability in Oracle Mysql

CVE-2002-1921

The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.

EPSS: 0.025 (83.3th percentile) — read the EPSS interpretation.

Affected products

  • Oracle Mysql — versions 3.20.32a, 3.22.26, 3.22.27
  • N/a — versions n/a

References