Lucene search
Redhat.comRH:CVE-2008-0226HistoryOct 30, 2015 - 10:34 a.m.
CVE-2008-0226
2015-10-3010:34:08
redhat.com
access.redhat.com
6
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.6
Confidence
Low
EPSS
0.974
Percentile
99.9%
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) “input_buffer& operator>>” in yassl_imp.cpp.
Related
packetstorm
packetstorm
MySQL yaSSL SSL Hello Message Buffer Overflow
2009-10-27 00:00:00
MySQL yaSSL SSL Hello Message Buffer Overflow
2010-01-27 00:00:00
metasploit
metasploit
MySQL yaSSL SSL Hello Message Buffer Overflow
2010-01-27 23:24:44
MySQL yaSSL SSL Hello Message Buffer Overflow
2010-01-26 20:12:13
saint
saint
MySQL yaSSL SSL Hello message buffer overflow
2008-03-10 00:00:00
MySQL yaSSL SSL Hello message buffer overflow
2008-03-10 00:00:00
MySQL yaSSL SSL Hello message buffer overflow
2008-03-10 00:00:00
exploitdb
exploitdb
MySQL yaSSL (Windows) - SSL Hello Message Buffer Overflow (Metasploit)
2010-05-09 00:00:00
MySQL 6.0 yaSSL 1.7.5 - Hello Message Buffer Overflow (Metasploit)
2008-01-04 00:00:00
MySQL yaSSL (Linux) - SSL Hello Message Buffer Overflow (Metasploit)
2010-05-09 00:00:00
checkpoint_advisories
checkpoint_advisories
MySQL yaSSL SSL Hello Message Buffer Overflow (CVE-2008-0226)
2009-11-10 00:00:00
prion
prion
Buffer overflow
2008-01-10 23:46:00
nvd
nvd
CVE-2008-0226
2008-01-10 23:46:00
cve
cve
CVE-2008-0226
2008-01-10 23:46:00
cvelist
cvelist
CVE-2008-0226
2008-01-10 23:00:00
seebug
seebug
MySQL <=6.0 yaSSL <= 1.7.5 Hello Message Buffer Overflow
2008-01-04 00:00:00
ubuntucve
ubuntucve
CVE-2008-0226
2008-01-10 00:00:00
osv
osv
mysql-dfsg-5.0 - buffer overflows
2008-01-28 00:00:00
nessus
nessus
yaSSL 1.7.5 Buffer Overflow
2012-01-16 00:00:00
Debian DSA-1478-1 : mysql-dfsg-5.0 - buffer overflows
2008-01-30 00:00:00
Mandriva Linux Security Advisory : mysql (MDVSA-2008:150)
2009-04-23 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1478-1)
2008-01-31 00:00:00
Debian Security Advisory DSA 1478-1 (mysql-dfsg-5.0)
2008-01-31 00:00:00
Mandriva Update for mysql MDVSA-2008:150 (mysql)
2009-04-09 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 5 package MySQL version 5.0.51-alt2.a
2008-03-16 00:00:00
debian
debian
ubuntu
ubuntu
MySQL vulnerabilities
2008-03-19 00:00:00
MySQL regression
2008-04-02 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.6
Confidence
Low
EPSS
0.974
Percentile
99.9%
Related for RH:CVE-2008-0226