CVE-2001-1255: Medium severity MySQL WinMySQLadmin vulnerability
Published Oct 2, 2001
·Updated
WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.
Affected Software
2 affected components
MySQL WinMySQLadmin=1.1
Oracle MySQL=3.23
Event History
Oct 2, 2001
CVE Published
04:00 AM
May 3, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1255?
The severity of CVE-2001-1255 is considered high due to the risk of unauthorized access to the MySQL database.
2
How do I fix CVE-2001-1255?
To fix CVE-2001-1255, change the MySQL password storage method to secure hashing instead of storing it in plain text in the my.ini file.
3
Who is affected by CVE-2001-1255?
CVE-2001-1255 affects users of WinMySQLadmin version 1.1 and MySQL version 3.23.
4
What are the potential impacts of CVE-2001-1255?
The potential impacts of CVE-2001-1255 include unauthorized access to sensitive database information and possible data breaches.
5
Is CVE-2001-1255 a remote or local vulnerability?
CVE-2001-1255 is a local vulnerability, requiring an attacker to have local access to the system hosting the MySQL database.