CVE-2002-1809

Published: Dec 31, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database.

Affected (34)

Products: Oracle: Mysql

Oracle

1 product

Mysql

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Oracle Mysql	Version 3.23.10
Oracle Mysql	Version 3.23.23
Oracle Mysql	Version 3.23.24
Oracle Mysql	Version 3.23.25
Oracle Mysql	Version 3.23.26
Oracle Mysql	Version 3.23.27
Oracle Mysql	Version 3.23.28
Oracle Mysql	Version 3.23.29
Oracle Mysql	Version 3.23.2
Oracle Mysql	Version 3.23.30
Oracle Mysql	Version 3.23.31
Oracle Mysql	Version 3.23.34
Oracle Mysql	Version 3.23.36
Oracle Mysql	Version 3.23.37
Oracle Mysql	Version 3.23.38
Oracle Mysql	Version 3.23.39
Oracle Mysql	Version 3.23.3
Oracle Mysql	Version 3.23.40
Oracle Mysql	Version 3.23.41
Oracle Mysql	Version 3.23.42
Oracle Mysql	Version 3.23.43
Oracle Mysql	Version 3.23.44
Oracle Mysql	Version 3.23.45
Oracle Mysql	Version 3.23.46
Oracle Mysql	Version 3.23.47
Oracle Mysql	Version 3.23.48
Oracle Mysql	Version 3.23.49
Oracle Mysql	Version 3.23.4
Oracle Mysql	Version 3.23.50
Oracle Mysql	Version 3.23.51
Oracle Mysql	Version 3.23.52
Oracle Mysql	Version 3.23.5
Oracle Mysql	Version 3.23.8
Oracle Mysql	Version 3.23.9