CVE-2002-1921: Oracle MySQL

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.

Affected products

• Oracle MySQL: version 3.20.32a only; version 3.22.26 only; version 3.22.27 only; version 3.22.28 only; version 3.22.29 only; version 3.22.30 only; …

Published 2002-12-31. Last modified 2026-06-16.