159 matches found
CVE-2012-0553
CVE-2012-0553 describes a buffer overflow in yaSSL used by MySQL 5.1.x (before 5.1.68) and 5.5.x (before 5.5.28); impact and attack vectors are not specified in the description.
CVE-2012-0553
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492...
CVE-2013-1492
Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553...
CVE-2012-0882
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...
CVE-2012-0882
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...
Buffer overflow
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...
CVE-2012-0882
Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosur...
CVE-2012-0882
CVE-2012-0882 describes a buffer overflow in yaSSL as used by MySQL 5.5.20 and possibly other versions (5.5.x before 5.5.22 and 5.1.x before 5.1.62). This could allow remote code execution via unspecified vectors; vulnerability demonstrated by VulnDisco Pack Professional 9.17. The provided descri...
PT-2012-2926 · Oracle · Mysql Server +1
Name of the Vulnerable Software and Affected Versions: MySQL versions 5.5.20 through 5.5.21 MySQL versions 5.1.x through 5.1.61 Description: A buffer overflow issue in yaSSL, used by MySQL, allows remote attackers to execute arbitrary code. The issue is related to unspecified vectors. There is no...
MySQL 5.5 < 5.5.28 Multiple Vulnerabilities
The version of MySQL 5.5 installed on the remote host is earlier than 5.5.28 and is, therefore, affected by vulnerabilities in the following components : - GIS Extension - Server - Server Installation - Server Optimizer - yaSSL C Tenable Network Security, Inc. include"compat.inc"; if description...
MySQL 5.1 < 5.1.62 Multiple Vulnerabilities
The version of MySQL 5.1 installed on the remote host is earlier than 5.1.62. It is, therefore, affected by the following vulnerabilities : - An error exists related to the included yaSSL component that could allow arbitrary code execution. CVE-2012-0882 - Errors exist related to 'Server...
MySQL 'yaSSL' RCE Vulnerability
MySQL is prone to an unspecified remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
MySQL 5.5 < 5.5.22 Multiple Vulnerabilities
The version of MySQL 5.5 installed on the remote host is earlier than 5.5.22. It is, therefore, affected by the following vulnerabilities : - An error exists related to the included yaSSL component that could allow arbitrary code execution. CVE-2012-0882 - Errors exist related to 'Server...
CVE-2012-1558
yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...
Null pointer dereference
yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...
CVE-2012-1558
yaSSL CyaSSL before 2.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted X.509 certificate...
CVE-2012-1558
CVE-2012-1558: yaSSL CyaSSL before 2.0.8 allows remote denial of service via a crafted X.509 certificate (NULL pointer dereference leading to application crash). The initial description provides the vulnerable product/version and impact; no fix/remediation details are provided in the documents. E...
CVE-2011-2900
Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...
Stack overflow
Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...
CVE-2011-2900
Stack-based buffer overflow in the 1 putdir function in mongoose.c in Mongoose 3.0, 2 putdir function in yasslEWS.c in yaSSL Embedded Web Server yasslEWS 0.2, and 3 shttpdputdir function in iodir.c in Simple HTTPD shttpd 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT...