Strix
26.1K

CVE-2009-4484

UnknownEPSS 69.55%

Last modified

CVE-2009-4484 is a vulnerability of currently unknown severity. Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.. EPSS estimates a 69.55% chance of exploitation in the next 30 days.

Description

Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.

Metrics

EPSS Probability
69.55%

99.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
OracleMysql>= 5.0.0, < 5.0.90—
OracleMysql>= 5.1.0, < 5.1.43—
OracleMysql5.0.0Milestone1
WolfsslYassl< 1.9.9—
CanonicalUbuntu Linux6.06—
CanonicalUbuntu Linux8.04—
CanonicalUbuntu Linux8.10—
CanonicalUbuntu Linux9.04—
CanonicalUbuntu Linux9.10—
CanonicalUbuntu Linux10.04—
CanonicalUbuntu Linux10.10—
CanonicalUbuntu Linux11.04—
CanonicalUbuntu Linux11.10—
DebianDebian Linux4.0—
DebianDebian Linux5.0—
DebianDebian Linux6.0—
MariadbMariadb>= 5.1, < 5.1.42—

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2009-4484?
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
How severe is CVE-2009-4484?
Severity scoring for CVE-2009-4484 is pending analysis. The EPSS model estimates a 69.55% probability of exploitation in the next 30 days.
How do I fix CVE-2009-4484?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2009-4484?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST