Published: 10/01/2008 Updated: 17/12/2019

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple buffer overflows in yaSSL 1.7.5 and previous versions, as used in MySQL and possibly other products, allow remote malicious users to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
yassl yassl
mysql mysql 5.0.0
mysql mysql 5.0.1
mysql mysql 5.0.2
mysql mysql 5.0.3
mysql mysql 5.0.16
mysql mysql 5.0.17
mysql mysql 5.0.20
oracle mysql 5.0.32
oracle mysql 5.0.34
mysql mysql 5.0.36
oracle mysql 5.0.51
oracle mysql 5.0.52
oracle mysql 5.1.1
oracle mysql 5.1.2
oracle mysql 5.1.3
oracle mysql 5.1.4
oracle mysql 5.1.17
oracle mysql 5.1.18
oracle mysql 5.1.19
oracle mysql 5.1.20
mysql mysql 5.0.10
mysql mysql 5.0.24
oracle mysql 5.0.25
oracle mysql 5.0.26
oracle mysql 5.0.42
mysql mysql 5.0.44
oracle mysql 5.0.44
oracle mysql 5.0.45
oracle mysql 5.0.58
mysql mysql 5.0.60
oracle mysql 5.0.60
oracle mysql 5.0.62
oracle mysql 5.1.9
oracle mysql 5.1.10
oracle mysql 5.1.11
oracle mysql 5.1.12
mysql mysql 5.0.4
mysql mysql 5.0.15
oracle mysql 5.0.23
mysql mysql 5.0.30
oracle mysql 5.0.40
oracle mysql 5.0.48
oracle mysql 5.0.50
mysql mysql 5.0.54
mysql mysql 5.0.56
mysql mysql 5.0.66
oracle mysql 5.1.6
oracle mysql 5.1.8
oracle mysql 5.1.13
oracle mysql 5.1.15
oracle mysql 5.1.22
mysql mysql 5.0.5
oracle mysql 5.0.28
oracle mysql 5.0.30
oracle mysql 5.0.36
oracle mysql 5.0.38
oracle mysql 5.0.41
oracle mysql 5.0.46
oracle mysql 5.0.56
oracle mysql 5.0.64
oracle mysql 5.0.66
oracle mysql 5.1
mysql mysql 5.1.5
oracle mysql 5.1.7
oracle mysql 5.1.14
oracle mysql 5.1.16
oracle mysql 5.1.21
apple mac os x 10.5.4
debian debian linux 5.0
canonical ubuntu linux 7.04
canonical ubuntu linux 6.06
canonical ubuntu linux 7.10
canonical ubuntu linux 6.10

Luigi Auriemma discovered two buffer overflows in YaSSL, an SSL implementation included in the MySQL database package, which could lead to denial of service and possibly the execution of arbitrary code The old stable distribution (sarge) doesn't contain mysql-dfsg-50 For the stable distribution (etch), these problems have been fixed in version 5 ...

USN-588-1 fixed vulnerabilities in MySQL In fixing CVE-2007-2692 for Ubuntu 606, additional improvements were made to make privilege checks more restictive As a result, an upstream bug was exposed which could cause operations on tables or views in a different database to fail This update fixes the problem ...

Masaaki Hirose discovered that MySQL could be made to dereference a NULL pointer An authenticated user could cause a denial of service (application crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table This issue only affects Ubuntu 606 and 610 (CVE-2006-7232) ...

## # $Id$ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote include Ms ...

## # $Id: mysql_yassl_hellorb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' clas ...

CWE-119 http://www.securityfocus.com/bid/27140 http://secunia.com/advisories/28324 http://secunia.com/advisories/28419 http://www.debian.org/security/2008/dsa-1478 http://secunia.com/advisories/28597 http://bugs.mysql.com/33814 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html http://www.ubuntu.com/usn/usn-588-1 http://secunia.com/advisories/29443 http://securityreason.com/securityalert/3531 http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 http://www.securityfocus.com/bid/31681 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html http://secunia.com/advisories/32222 http://support.apple.com/kb/HT3216 http://www.vupen.com/english/advisories/2008/0560/references http://www.vupen.com/english/advisories/2008/2780 https://exchange.xforce.ibmcloud.com/vulnerabilities/39431 https://exchange.xforce.ibmcloud.com/vulnerabilities/39429 http://www.securityfocus.com/archive/1/485811/100/0/threaded http://www.securityfocus.com/archive/1/485810/100/0/threaded https://nvd.nist.gov https://www.debian.org/security/./dsa-1478 https://usn.ubuntu.com/588-2/https://www.exploit-db.com/exploits/9953/

CVE-2008-0226

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect