CVE-2007-3567 MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests...
HighCVSS 7.5
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mysqldumper | = 1.21 | No fix listed |
| mysqldumper | = 1.22 | No fix listed |
| mysqldumper | = 1.23 | No fix listed |
| mysqldumper | = typo3-extension_0.0.5 | No fix listed |
References
- 20070804 Re: MySQLDumper vulnerability: Bypassing Apache based access control possible mailing-list
- 42460 vdb-entry
- 2859 third-party-advisory
- 20070703 MySQLDumper vulnerability: Bypassing Apache based access control possible mailing-list
- 24759 exploit vdb-entry
- mysqldumper-post-security-bypass(35291) vdb-entry