ByteOS Network

NVD Vulnerability Details :

CVE-2009-4484

Modified

Source-cve@mitre.org

Published At-30 Dec, 2009 | 21:30

Updated At-23 Apr, 2026 | 00:35

Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

Oracle Corporation

>>mysql>>Versions from 5.0.0(inclusive) to 5.0.90(exclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.1.0(inclusive) to 5.1.43(exclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.0.0

cpe:2.3:a:oracle:mysql:5.0.0:milestone1:*:*:*:*:*:*

Oracle Corporation

>>mysql>>5.0.0

cpe:2.3:a:oracle:mysql:5.0.0:milestone2:*:*:*:*:*:*

wolfssl>>yassl>>Versions before 1.9.9(exclusive)

cpe:2.3:a:wolfssl:yassl:*:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>8.04

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

Canonical Ltd.

>>ubuntu_linux>>8.10

cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>9.04

cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>9.10

cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

Canonical Ltd.

>>ubuntu_linux>>10.10

cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>11.04

cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>11.10

cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>4.0

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>5.0

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>6.0

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

MariaDB Foundation

>>mariadb>>Versions from 5.1(inclusive) to 5.1.42(exclusive)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov

Vendor Statements

Organization : Red Hat

Last Modified : 2010-01-26T00:00:00

Not vulnerable. This issue did not affect the versions of mysql as shipped with Red Hat Enterprise Linux 3, 4, or 5. The packages use OpenSSL and not yaSSL.

References

Hyperlink	Source	Resource
http://archives.neohapsis.com/archives/dailydave/2010-q1/0002.html	cve@mitre.org	Broken Link
http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1	cve@mitre.org	Broken Link
http://bugs.mysql.com/bug.php?id=50227	cve@mitre.org	Exploit Issue Tracking Vendor Advisory
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-90.html	cve@mitre.org	Broken Link
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html	cve@mitre.org	Broken Link
http://intevydis.blogspot.com/2010/01/mysq-yassl-stack-overflow.html	cve@mitre.org	Broken Link
http://intevydis.com/mysql_demo.html	cve@mitre.org	Broken Link
http://intevydis.com/mysql_overflow1.py.txt	cve@mitre.org	Broken Link
http://intevydis.com/vd-list.shtml	cve@mitre.org	Broken Link
http://isc.sans.org/diary.html?storyid=7900	cve@mitre.org	Third Party Advisory
http://lists.immunitysec.com/pipermail/dailydave/2010-January/006020.html	cve@mitre.org	Broken Link
http://lists.mysql.com/commits/96697	cve@mitre.org	Patch Vendor Advisory
http://secunia.com/advisories/37493	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/38344	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/38364	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/38517	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/38573	cve@mitre.org	Third Party Advisory
http://securitytracker.com/id?1023402	cve@mitre.org	Third Party Advisory VDB Entry
http://securitytracker.com/id?1023513	cve@mitre.org	Third Party Advisory VDB Entry
http://ubuntu.com/usn/usn-897-1	cve@mitre.org	Third Party Advisory
http://www.debian.org/security/2010/dsa-1997	cve@mitre.org	Third Party Advisory
http://www.intevydis.com/blog/?p=106	cve@mitre.org	Broken Link
http://www.intevydis.com/blog/?p=57	cve@mitre.org	Broken Link
http://www.metasploit.com/modules/exploit/linux/mysql/mysql_yassl_getname	cve@mitre.org	Third Party Advisory
http://www.osvdb.org/61956	cve@mitre.org	Broken Link
http://www.securityfocus.com/bid/37640	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/37943	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/37974	cve@mitre.org	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1397-1	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2010/0233	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2010/0236	cve@mitre.org	Third Party Advisory
http://www.yassl.com/news.html#yassl199	cve@mitre.org	Broken Link
http://www.yassl.com/release.html	cve@mitre.org	Broken Link
http://yassl.cvs.sourceforge.net/viewvc/yassl/yassl/taocrypt/src/asn.cpp?r1=1.13&r2=1.14	cve@mitre.org	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=555313	cve@mitre.org	Issue Tracking Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55416	cve@mitre.org	Third Party Advisory VDB Entry
http://archives.neohapsis.com/archives/dailydave/2010-q1/0002.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://bugs.mysql.com/bug.php?id=50227	af854a3a-2127-422b-91ae-364da2661108	Exploit Issue Tracking Vendor Advisory
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-90.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://intevydis.blogspot.com/2010/01/mysq-yassl-stack-overflow.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://intevydis.com/mysql_demo.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://intevydis.com/mysql_overflow1.py.txt	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://intevydis.com/vd-list.shtml	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://isc.sans.org/diary.html?storyid=7900	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://lists.immunitysec.com/pipermail/dailydave/2010-January/006020.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://lists.mysql.com/commits/96697	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://secunia.com/advisories/37493	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/38344	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/38364	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/38517	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://secunia.com/advisories/38573	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://securitytracker.com/id?1023402	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://securitytracker.com/id?1023513	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://ubuntu.com/usn/usn-897-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2010/dsa-1997	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.intevydis.com/blog/?p=106	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.intevydis.com/blog/?p=57	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.metasploit.com/modules/exploit/linux/mysql/mysql_yassl_getname	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.osvdb.org/61956	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.securityfocus.com/bid/37640	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/37943	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/37974	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1397-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.vupen.com/english/advisories/2010/0233	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.vupen.com/english/advisories/2010/0236	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.yassl.com/news.html#yassl199	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.yassl.com/release.html	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://yassl.cvs.sourceforge.net/viewvc/yassl/yassl/taocrypt/src/asn.cpp?r1=1.13&r2=1.14	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=555313	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55416	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry

Hyperlink: http://archives.neohapsis.com/archives/dailydave/2010-q1/0002.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://bugs.mysql.com/bug.php?id=50227

Source: cve@mitre.org

Resource:

Exploit

Issue Tracking

Vendor Advisory

Hyperlink: http://dev.mysql.com/doc/refman/5.0/en/news-5-0-90.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://intevydis.blogspot.com/2010/01/mysq-yassl-stack-overflow.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://intevydis.com/mysql_demo.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://intevydis.com/mysql_overflow1.py.txt

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://intevydis.com/vd-list.shtml

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://isc.sans.org/diary.html?storyid=7900

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://lists.immunitysec.com/pipermail/dailydave/2010-January/006020.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://lists.mysql.com/commits/96697

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://secunia.com/advisories/37493

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/38344

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/38364

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/38517

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/38573

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://securitytracker.com/id?1023402

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://securitytracker.com/id?1023513

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://ubuntu.com/usn/usn-897-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2010/dsa-1997

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.intevydis.com/blog/?p=106

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.intevydis.com/blog/?p=57

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.metasploit.com/modules/exploit/linux/mysql/mysql_yassl_getname

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.osvdb.org/61956

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/37640

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/37943

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securityfocus.com/bid/37974

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/USN-1397-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2010/0233

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2010/0236

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.yassl.com/news.html#yassl199

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://www.yassl.com/release.html

Source: cve@mitre.org

Resource:

Broken Link

Hyperlink: http://yassl.cvs.sourceforge.net/viewvc/yassl/yassl/taocrypt/src/asn.cpp?r1=1.13&r2=1.14

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=555313

Source: cve@mitre.org

Resource:

Issue Tracking

Third Party Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/55416

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://archives.neohapsis.com/archives/dailydave/2010-q1/0002.html