Unscored CVE-2007-3567 EUVD-2007-3551GHSA-vgjg-9655-rqmc

MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers…

Published Jul 5, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests.

References

20070804 Re: MySQLDumper vulnerability: Bypassing Apache based access control possible mailing-list
mysqldumper-post-security-bypass(35291) vdb-entry
42460 vdb-entry
2859 third-party-advisory
20070703 MySQLDumper vulnerability: Bypassing Apache based access control possible mailing-list
24759 vdb-entry