The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mysql | Oracle | 3.20.32a (including) | 3.20.32a (including) |
| Mysql | Oracle | 3.22.26 (including) | 3.22.26 (including) |
| Mysql | Oracle | 3.22.27 (including) | 3.22.27 (including) |
| Mysql | Oracle | 3.22.28 (including) | 3.22.28 (including) |
| Mysql | Oracle | 3.22.29 (including) | 3.22.29 (including) |
| Mysql | Oracle | 3.22.30 (including) | 3.22.30 (including) |
| Mysql | Oracle | 3.22.32 (including) | 3.22.32 (including) |
| Mysql | Oracle | 3.23.2 (including) | 3.23.2 (including) |
| Mysql | Oracle | 3.23.3 (including) | 3.23.3 (including) |
| Mysql | Oracle | 3.23.4 (including) | 3.23.4 (including) |
| Mysql | Oracle | 3.23.5 (including) | 3.23.5 (including) |
| Mysql | Oracle | 3.23.8 (including) | 3.23.8 (including) |
| Mysql | Oracle | 3.23.9 (including) | 3.23.9 (including) |
| Mysql | Oracle | 3.23.10 (including) | 3.23.10 (including) |
| Mysql | Oracle | 3.23.23 (including) | 3.23.23 (including) |
| Mysql | Oracle | 3.23.24 (including) | 3.23.24 (including) |
| Mysql | Oracle | 3.23.25 (including) | 3.23.25 (including) |
| Mysql | Oracle | 3.23.26 (including) | 3.23.26 (including) |
| Mysql | Oracle | 3.23.27 (including) | 3.23.27 (including) |
| Mysql | Oracle | 3.23.28 (including) | 3.23.28 (including) |
| Mysql | Oracle | 3.23.28-gamma (including) | 3.23.28-gamma (including) |
| Mysql | Oracle | 3.23.29 (including) | 3.23.29 (including) |
| Mysql | Oracle | 3.23.30 (including) | 3.23.30 (including) |
| Mysql | Oracle | 3.23.31 (including) | 3.23.31 (including) |
| Mysql | Oracle | 3.23.34 (including) | 3.23.34 (including) |
| Mysql | Oracle | 3.23.36 (including) | 3.23.36 (including) |
| Mysql | Oracle | 3.23.37 (including) | 3.23.37 (including) |
| Mysql | Oracle | 3.23.38 (including) | 3.23.38 (including) |
| Mysql | Oracle | 3.23.39 (including) | 3.23.39 (including) |
| Mysql | Oracle | 3.23.40 (including) | 3.23.40 (including) |
| Mysql | Oracle | 3.23.41 (including) | 3.23.41 (including) |
| Mysql | Oracle | 3.23.42 (including) | 3.23.42 (including) |
| Mysql | Oracle | 3.23.43 (including) | 3.23.43 (including) |
| Mysql | Oracle | 3.23.44 (including) | 3.23.44 (including) |
| Mysql | Oracle | 3.23.45 (including) | 3.23.45 (including) |
| Mysql | Oracle | 3.23.46 (including) | 3.23.46 (including) |
| Mysql | Oracle | 3.23.47 (including) | 3.23.47 (including) |
| Mysql | Oracle | 3.23.48 (including) | 3.23.48 (including) |
| Mysql | Oracle | 3.23.49 (including) | 3.23.49 (including) |
| Mysql | Oracle | 3.23.50 (including) | 3.23.50 (including) |
| Mysql | Oracle | 3.23.51 (including) | 3.23.51 (including) |
| Mysql | Oracle | 3.23.52 (including) | 3.23.52 (including) |