vendor:
MySQL Server for Windows
by:
Kingcope
9,3
CVSS
HIGH
Remote SYSTEM Level Exploit
N/A
CWE
Product Name: MySQL Server for Windows
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2012
MySQL Scanner & MySQL Server for Windows Remote SYSTEM Level Exploit
This exploit allows an attacker to gain SYSTEM level access to a Windows machine running a vulnerable version of MySQL Server. The attacker can use the pnscan tool to scan for vulnerable MySQL servers and the mysql_win_remote.pl tool to exploit the vulnerability. The accounts file holds the user/password combinations to try and the hits are saved in the jack.pot file.
Mitigation:
Upgrade to the latest version of MySQL Server for Windows.
