CVE-2009-4833

MySQL Connector/NET < 6.0.3 - Man-in-the-Middle Attack via Spoofed SSL Certificate

Title source: llm
STIX 2.1

Description

MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate.

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1022482
Exploit, Patch x_refsource_confirm
http://bugs.mysql.com/bug.php?id=38700
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35514
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35604
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51406

Scores

EPSS 0.0095
EPSS Percentile 57.1%

Details

CWE
CWE-20
Status published
Products (4)
oracle/mysql_connector\/net 6.0.0
oracle/mysql_connector\/net 6.0.1
oracle/mysql_connector\/net 6.0.2
oracle/mysql_connector\/net < 6.0.3
Published Apr 29, 2010
Tracked Since Feb 18, 2026