Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-1809. PoCs published by g0thm0g.
AI-analyzed exploit summary This exploit targets a default misconfiguration in MySQL's Windows binary release where the root user has no password and allows remote connections. The code connects to a MySQL server as root with a null password, retrieves user password hashes, and attempts to crack them using a dictionary file.
Description
The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database.
Exploits (1)
This exploit targets a default misconfiguration in MySQL's Windows binary release where the root user has no password and allows remote connections. The code connects to a MySQL server as root with a null password, retrieves user password hashes, and attempts to crack them using a dictionary file.