CVE-2002-1809
First published: Tue Dec 31 2002(Updated: )
The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle MySQL Installer | =3.23.2 | |
| Oracle MySQL Installer | =3.23.3 | |
| Oracle MySQL Installer | =3.23.4 | |
| Oracle MySQL Installer | =3.23.5 | |
| Oracle MySQL Installer | =3.23.8 | |
| Oracle MySQL Installer | =3.23.9 | |
| Oracle MySQL Installer | =3.23.10 | |
| Oracle MySQL Installer | =3.23.23 | |
| Oracle MySQL Installer | =3.23.24 | |
| Oracle MySQL Installer | =3.23.25 | |
| Oracle MySQL Installer | =3.23.26 | |
| Oracle MySQL Installer | =3.23.27 | |
| Oracle MySQL Installer | =3.23.28 | |
| Oracle MySQL Installer | =3.23.29 | |
| Oracle MySQL Installer | =3.23.30 | |
| Oracle MySQL Installer | =3.23.31 | |
| Oracle MySQL Installer | =3.23.34 | |
| Oracle MySQL Installer | =3.23.36 | |
| Oracle MySQL Installer | =3.23.37 | |
| Oracle MySQL Installer | =3.23.38 | |
| Oracle MySQL Installer | =3.23.39 | |
| Oracle MySQL Installer | =3.23.40 | |
| Oracle MySQL Installer | =3.23.41 | |
| Oracle MySQL Installer | =3.23.42 | |
| Oracle MySQL Installer | =3.23.43 | |
| Oracle MySQL Installer | =3.23.44 | |
| Oracle MySQL Installer | =3.23.45 | |
| Oracle MySQL Installer | =3.23.46 | |
| Oracle MySQL Installer | =3.23.47 | |
| Oracle MySQL Installer | =3.23.48 | |
| Oracle MySQL Installer | =3.23.49 | |
| Oracle MySQL Installer | =3.23.50 | |
| Oracle MySQL Installer | =3.23.51 | |
| Oracle MySQL Installer | =3.23.52 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-1809?
CVE-2002-1809 is classified as a high severity vulnerability due to the presence of a NULL root password allowing unauthorized remote access.
How do I fix CVE-2002-1809?
To fix CVE-2002-1809, set a strong root password for MySQL in your database configuration.
What versions of MySQL are affected by CVE-2002-1809?
CVE-2002-1809 affects MySQL versions 3.23.2 through 3.23.52.
Can CVE-2002-1809 be exploited remotely?
Yes, CVE-2002-1809 can be exploited remotely due to the default NULL root password.
What are the consequences of CVE-2002-1809?
The consequences of CVE-2002-1809 include unauthorized access to the MySQL database, which may lead to data breaches and other security risks.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- vendor/oracle
- product/mysql
- canonical/oracle mysql
- agent/software-canonical-lookup-request
- collector/nvd-index
- version/oracle mysql/3.23.2
- version/oracle mysql/3.23.3
- version/oracle mysql/3.23.4
- version/oracle mysql/3.23.5
- version/oracle mysql/3.23.8
- version/oracle mysql/3.23.9
- version/oracle mysql/3.23.10
- version/oracle mysql/3.23.23
- version/oracle mysql/3.23.24
- version/oracle mysql/3.23.25
- version/oracle mysql/3.23.26
- version/oracle mysql/3.23.27
- version/oracle mysql/3.23.28
- version/oracle mysql/3.23.29
- version/oracle mysql/3.23.30
- version/oracle mysql/3.23.31
- version/oracle mysql/3.23.34
- version/oracle mysql/3.23.36
- version/oracle mysql/3.23.37
- version/oracle mysql/3.23.38
- version/oracle mysql/3.23.39
- version/oracle mysql/3.23.40
- version/oracle mysql/3.23.41
- version/oracle mysql/3.23.42
- version/oracle mysql/3.23.43
- version/oracle mysql/3.23.44
- version/oracle mysql/3.23.45
- version/oracle mysql/3.23.46
- version/oracle mysql/3.23.47
- version/oracle mysql/3.23.48
- version/oracle mysql/3.23.49
- version/oracle mysql/3.23.50
- version/oracle mysql/3.23.51
- version/oracle mysql/3.23.52