Unscored severity · published Apr 29, 2010
CVE-2009-4833
MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack…
–
CVSS
1%
EPSS
No
On KEV
Description
MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Mysql Connector/net · Oracle
through 6.0.3; 6.0.0; 6.0.1; 6.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4833
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4833
Exploit
http://bugs.mysql.com/bug.php?id=38700
Vendor Advisory
http://secunia.com/advisories/35604
www.securityfocus.com
http://www.securityfocus.com/bid/35514
www.securitytracker.com
http://www.securitytracker.com/id?1022482
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/51406
More from Mysql Connector/net
8.5
CVE-2026-60193
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net)
8.1
CVE-2026-60192
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net)
7.5
CVE-2018-2585
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net)
7.4
CVE-2026-60317
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net)
5.4
CVE-2017-10277
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net)