CVE-2002-1923

CVE-2002-1923 describes a vulnerability in MySQL versions 3.20.32 through 3.23.52 running on Windows, where the default configuration lacks enabled logging. This oversight allows remote attackers to perform malicious activities without leaving a trace, hindering detection and forensic analysis. The vulnerability carries a CVSS score of 7.5, indicating a high severity due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or Metasploit modules, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness among security researchers.