CVE:CVE-2002-1809
CNNVD:CNNVD-200212-263
MySQL 3.23.2到3.23.52的Windows二进制版本中默认配置存在NULL根密码。远程攻击者获得未经授权MySQL数据库根目录访问。
solution:Upgrade oracle mysql to a higher version than 3.23.2,3.23.3,3.23.4,3.23.5,3.23.8,3.23.9,3.23.10,3.23.23,3.23.24,3.23.25,3.23.26,3.23.27,3.23.28,3.23.29,3.23.30,3.23.31,3.23.34,3.23.36,3.23.37,3.23.38,3.23.39,3.23.40,3.23.41,3.23.42,3.23.43,3.23.44,3.23.45,3.23.46,3.23.47,3.23.48,3.23.49,3.23.50,3.23.51,3.23.52,and avoid the version 3.23.2,3.23.3,3.23.4,3.23.5,3.23.8,3.23.9,3.23.10,3.23.23,3.23.24,3.23.25,3.23.26,3.23.27,3.23.28,3.23.29,3.23.30,3.23.31,3.23.34,3.23.36,3.23.37,3.23.38,3.23.39,3.23.40,3.23.41,3.23.42,3.23.43,3.23.44,3.23.45,3.23.46,3.23.47,3.23.48,3.23.49,3.23.50,3.23.51,3.23.52