CVE-2009-4833

Currently unrated

Key Information:

Vendor
Oracle
Status
Mysql Connector\/net
Vendor
CVE Published:
29 April 2010

Summary

MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate.

References

http://www.securitytracker.com/id?1022482
vdb-entryx_refsource_SECTRACK
http://bugs.mysql.com/bug.php?id=38700
x_refsource_CONFIRM
http://www.securityfocus.com/bid/35514
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.