CVE-2009-4484 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2009-4484
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2009-4484

Description: Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/55416 UBUNTU http://ubuntu.com/usn/usn-897-1 ST 1023513 1023402 SAID Secunia Advisory: SA37493 Secunia Advisory: SA38344 Secunia Advisory: SA38364 Secunia Advisory: SA38517 Secunia Advisory: SA38573 OSVDB 61956 MLIST http://lists.immunitysec.com/pipermail/dailydave/2010-January/006020.html http://lists.mysql.com/commits/96697 http://archives.neohapsis.com/archives/dailydave/2010-q1/0002.html MISC http://www.metasploit.com/modules/exploit/linux/mysql/mysql_yassl_getname http://intevydis.com/mysql_overflow1.py.txt http://intevydis.blogspot.com/2010/01/mysq-yassl-stack-overflow.html http://intevydis.com/mysql_demo.html http://isc.sans.org/diary.html?storyid=7900 http://www.intevydis.com/blog/?p=106 http://www.intevydis.com/blog/?p=57 http://intevydis.com/vd-list.shtml DEBIAN http://www.debian.org/security/2010/dsa-1997 CONFIRM http://www.yassl.com/release.html http://yassl.cvs.sourceforge.net/viewvc/yassl/yassl/taocrypt/src/asn.cpp?r1=1.13&r2=1.14 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-90.html http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html http://www.yassl.com/news.html#yassl199 http://bugs.mysql.com/bug.php?id=50227 http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1 BID 37943 37974 37640

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability