CVE-2001-1255

WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2001-10-02

Last modified

2024-08-08

Affected products

• Winmysqladmin (Mysql)
• Mysql (Oracle)

References

• http://online.securityfocus.com/archive/1/217848
• http://www.iss.net/security_center/static/7206.php
• http://www.securityfocus.com/bid/3381