Multiple vulnerabilities in yaSSL 1.7.5

Luigi Auriemma Application: yaSSL http://www.yassl.com Versions: = 1.7.5 Platforms: Windows and nix Bugs: A buffer-overflow in ProcessOldClientHello B buffer-overflow in "inputbuffer& operator" C invalid memory access in HASHwithTransform::Update Exploitation: remote Date: 04 Jan 2008 Author: Lui...

Pre-auth buffer-overflow in mySQL through yaSSL

The following is a proof-of-concept for testing the buffer-overflow which affects yaSSL = 1.7.5 on mySQL servers, any version, included the latest 6.0.3: http://aluigi.org/poc/mysqlo.zip The vulnerability is exploitable before authentication so the only requirements for testing it are the usage o...

MySQL <=6.0 yaSSL <= 1.7.5 Hello Message Buffer Overflow

MySQL yaSSL SSL Hello Message Buffer Overflow 1. 漏洞介绍和分析 yaSSL是用于实现SSL的开源软件包。 yaSSL实现上存在多个远程溢出及无效内存访问问题，远程攻击者可能利用此漏洞控制服务器。 向堆栈缓冲区溢出的yaSSL1.7.5和更早的版本实现与MySQL捆绑 = 6.0。通过发送一个专门制作的HEllo 包 ，攻击者可以执行任意代码。 代码分析： 用于包含客户端所接收的Hello报文中的数据的缓冲区结构如下源自yasslimp.hpp： class ClientHello : public HandShakeBase...

MySQL yaSSL SSL Hello Message Buffer Overflow

This module exploits a stack buffer overflow in the yaSSL 1.7.5 and earlier implementation bundled with MySQL use exploit/linux/mysql/mysql/yasslhello msf undefinedyasslhello show actions ...actions... msf undefinedyasslhello set ACTION msf undefinedyasslhello show options ...show and set...

YaSSL library / MySQL multiple security vulnerabilities

Buffer overflows in ProcessOldClientHello and operator, memory exhaustion in HASHwithTransform::Update...

MySQL yaSSL SSL Hello Message Buffer Overflow

This module exploits a stack buffer overflow in the yaSSL 1.7.5 and earlier implementation bundled with MySQL use exploit/windows/mysql/mysql/yasslhello msf undefinedyasslhello show actions ...actions... msf undefinedyasslhello set ACTION msf undefinedyasslhello show options ...show and set...

MySQL 6.0 yaSSL 1.7.5 - Hello Message Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MySQL yaSSL...

CVE-2005-3731

Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."...

CVE-2005-3731

Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."...

CVE-2005-3731

Technical details about CVE-2005-3731 are not provided in the supplied documents; no concrete information on affected versions, impact, or remediation is available here. Monitor for updates.

CVE-2005-3731: Undefined Security Weakness

Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."...

YaSSL certificate chain validation problem

No description provided...

[SA17619] yaSSL Unspecified Certification Chain Processing Vulnerability

TITLE: yaSSL Unspecified Certification Chain Processing Vulnerability SECUNIA ADVISORY ID: SA17619 VERIFY ADVISORY: http://secunia.com/advisories/17619/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: yaSSL Library 1.x http://secunia.com/product/6145/ DESCRIPTION: A...