Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9 as used in mysqld in MySQL 5.0.x before 5.0.90 MySQL 5.1.x before 5.1.43 MySQL 5.5.x through 5.5.0-m2 and other products allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.

🗓️ 25 Sep 2020 00:00:00Reported by MicrosoftType

Buffer overflows in CertDecoder::GetName (yaSSL TaoCrypt) before 1.9.9 allow remote code execution or crash via crafted certificates.

Reporter	Title	Published	Views	Family All 35
CBLMariner	CVE-2009-4484 affecting package kernel 5.4.51-11	25 Aug 202119:57	–	cbl_mariner
Circl	CVE-2009-4484	30 Apr 201000:00	–	circl
Check Point Advisories	MySQL yaSSL Certificate Packet Stack Overflow - Ver2 (CVE-2009-4484)	26 Mar 201500:00	–	checkpoint_advisories
CVE	CVE-2009-4484	30 Dec 200921:00	–	cve
Cvelist	CVE-2009-4484	30 Dec 200921:00	–	cvelist
Debian	[SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities	14 Feb 201012:28	–	debian
Debian	[SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities	14 Feb 201012:28	–	debian
Tenable Nessus	Debian DSA-1997-1 : mysql-dfsg-5.0 - several vulnerabilities	24 Feb 201000:00	–	nessus
Tenable Nessus	GLSA-201201-02 : MySQL: Multiple vulnerabilities	6 Jan 201200:00	–	nessus
Tenable Nessus	MySQL < 5.0.90 / 5.1.43 / 5.5.0-m2 Multiple Buffer Overflows	18 Jan 201200:00	–	nessus