CVE-2013-1492

Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553...

CVE-2013-1492

Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553...

CVE-2012-0553

Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492...

CVE-2012-0882

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...

CVE-2012-0882

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...

Buffer overflow

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...

CVE-2012-0882

Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...

CVE-2012-0882

CVE-2012-0882 describes a buffer overflow in yaSSL as used by MySQL 5.5.20 and possibly other versions (5.5.x before 5.5.22 and 5.1.x before 5.1.62). This could allow remote code execution via unspecified vectors; vulnerability demonstrated by VulnDisco Pack Professional 9.17. The provided descri...

PT-2012-2926 · Oracle · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL versions 5.5.20 through 5.5.21 MySQL versions 5.1.x through 5.1.61 Description: A buffer overflow issue in yaSSL, used by MySQL, allows remote attackers to execute arbitrary code. The issue is related to unspecified vectors. There is no...

MySQL 5.5 < 5.5.28 Multiple Vulnerabilities

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.28 and is, therefore, affected by vulnerabilities in the following components : - GIS Extension - Server - Server Installation - Server Optimizer - yaSSL C Tenable Network Security, Inc. include"compat.inc"; if description...

MySQL 'yaSSL' RCE Vulnerability

MySQL is prone to an unspecified remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MySQL 5.1 < 5.1.62 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.62. It is, therefore, affected by the following vulnerabilities : - An error exists related to the included yaSSL component that could allow arbitrary code execution. CVE-2012-0882 - Errors exist related to 'Server...

MySQL 5.5 < 5.5.22 Multiple Vulnerabilities

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.22. It is, therefore, affected by the following vulnerabilities : - An error exists related to the included yaSSL component that could allow arbitrary code execution. CVE-2012-0882 - Errors exist related to 'Server...

CVE-2012-1558

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...

Null pointer dereference

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...

CVE-2012-1558

CVE-2012-1558: yaSSL CyaSSL before 2.0.8 allows remote denial of service via a crafted X.509 certificate (NULL pointer dereference leading to application crash). The initial description provides the vulnerable product/version and impact; no fix/remediation details are provided in the documents. E...

CVE-2012-1558

yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...

CVE-2011-2900

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

Stack overflow

Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...

CVE-2011-2900

CVE-2011-2900 is a stack-based buffer overflow in the HTTP PUT handling paths of Mongoose 3.0, yaSSL Embedded Web Server (yasslEWS) 0.2, and Simple HTTPD (shttpd) 1.42, allowing remote code execution. The root cause is a vulnerable put_dir/ _shttpd_put_dir path in mongoose.c, yasslEWS.c, and io_d...