MySQL 5.5 < 5.5.22 Multiple Vulnerabilities

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.22. It is, therefore, affected by the following vulnerabilities : - An error exists related to the included yaSSL component that could allow arbitrary code execution. CVE-2012-0882 - Errors exist related to 'Server...

CVE-2012-1558

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...

Null pointer dereference

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...

CVE-2012-1558

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...

CVE-2012-1558

CVE-2012-1558: yaSSL CyaSSL before 2.0.8 allows remote denial of service via a crafted X.509 certificate (NULL pointer dereference leading to application crash). The initial description provides the vulnerable product/version and impact; no fix/remediation details are provided in the documents. E...

CVE-2012-1558: Undefined Security Weakness

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...

CVE-2011-2900

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

Stack overflow

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

CVE-2011-2900

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

CVE-2011-2900

The Mongoose 3.0 web server, yaSSL Embedded Web Server (yasslEWS) 0.2 , and Simple HTTPD (shttpd) 1.42 are vulnerable to a stack-based buffer overflow . The flaws reside in the put_dir function (mongoose.c and yasslEWS.c) and the _shttpd_put_dir function (io_dir.c). A remote attacker can exploit ...

VulnCheck KEV: CVE-2011-2900

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

CVE-2011-2900: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

PT-2011-4181

Name of the Vulnerable Software and Affected Versions Mongoose version 3.0 yaSSL Embedded Web Server yasslEWS version 0.2 Simple HTTPD shttpd version 1.42 Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code via an HTTP PUT request. This ha...

MySQL yaSSL (Linux) - SSL Hello Message Buffer Overflow (Metasploit)

$Id: mysqlyasslhello.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

MySQL yaSSL (Windows) - SSL Hello Message Buffer Overflow (Metasploit)

$Id: mysqlyasslhello.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

MySQL - yaSSL CertDecoder::GetName Buffer Overflow (Metasploit)

$Id: mysqlyasslgetname.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

mysql: client SSL certificate verification flaw

The vioverifycallback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificat...

MySQL yaSSL CertDecoder::GetName Buffer Overflow

$Id: mysqlyasslgetname.rb 8287 2010-01-28 07:34:47Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MySQL yaSSL库证书解析栈溢出漏洞

BUGTRAQ ID: 37943 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 MySQL所捆绑的yaSSL库在解析畸形证书时存在栈溢出漏洞，如果数据库在编译时加入了对SSL的支持并且配置打开了SSL功能，远程攻击者可能利用此漏洞通过提交畸形的证书内容触发这个溢出，从而在服务器上执行任意指令。 MySQL AB MySQL 5.5-ms2 MySQL AB MySQL 5.1.x MySQL AB MySQL 5.0.x 厂商补丁： MySQL AB --------...

MySQL yaSSL CertDecoder::GetName Buffer Overflow

This module exploits a stack buffer overflow in the yaSSL 1.9.8 and earlier implementation bundled with MySQL. By sending a specially crafted client certificate, an attacker can execute arbitrary code. This vulnerability is present within the CertDecoder::GetName function inside...