CVE-2002-1921

CVE-2002-1921 describes a critical vulnerability in MySQL versions 3.20.32 through 3.23.52 running on Windows, where the default configuration fails to bind the database to the loopback interface. This misconfiguration allows remote attackers to directly connect to the database. The vulnerability carries a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor readily available exploit code in common frameworks, the vulnerability has garnered significant community discussion, suggesting awareness and potential for future exploitation.