Unscored CVE-2009-4833 EUVD-2009-4796GHSA-3j5x-62hv-3543

MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers …

Published Apr 29, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate.

References

1022482 vdb-entry
http://bugs.mysql.com/bug.php?id=38700
35514 vdb-entry
35604 third-party-advisory
mysql-ssl-spoofing(51406) vdb-entry