CVE-2008-0226 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-0226
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0226

Description: Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39431 http://xforce.iss.net/xforce/xfdb/39429 UBUNTU http://www.ubuntu.com/usn/usn-588-1 SREASON http://securityreason.com/securityalert/3531 SAID Secunia Advisory: SA28324 Secunia Advisory: SA28419 Secunia Advisory: SA28597 Secunia Advisory: SA29443 Secunia Advisory: SA32222 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 DEBIAN http://www.debian.org/security/2008/dsa-1478 CONFIRM http://support.apple.com/kb/HT3216 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html http://bugs.mysql.com/33814 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/485811/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/485810/100/0/threaded BID 27140 31681 APPLE http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Return to the previous page.