NetSight
IP …
high7.5Public exploit code

CVE-2008-0226

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) th…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.

Affected products

VendorProductAffected versions
YasslYassl
through 1.7.5
MysqlMysql
Versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5
OracleMysql
Versions 5.0.23, 5.0.25, 5.0.26, 5.0.28, 5.0.30, 5.0.32
AppleMac Os X
Version 10.5.4
DebianDebian Linux
Version 5.0
CanonicalUbuntu Linux
Versions 6.06, 6.10, 7.04, 7.10

Weakness classification

CWE-119

References