yaSSL Multiple Remote Buffer Overflow Vulnerabilities

Bugtraq ID:	27140
Class:	Boundary Condition Error
CVE:	CVE-2008-0226 CVE-2008-0227
Remote:	Yes
Local:	No
Published:	Jan 04 2008 12:00AM
Updated:	Jan 28 2010 05:21AM
Credit:	Luigi Auriemma discovered these vulnerabilities.
Vulnerable:	yaSSL yaSSL 1.7.5 + MySQL AB MySQL 6.0.4 + MySQL AB MySQL 6.0.3 + MySQL AB MySQL 6.0.2 + MySQL AB MySQL 6.0.1 + MySQL AB MySQL 6.0 + MySQL AB MySQL 5.1.23 + MySQL AB MySQL 5.1.22 + MySQL AB MySQL 5.1.18 + MySQL AB MySQL 5.1.17 + MySQL AB MySQL 5.1.16 + MySQL AB MySQL 5.1.15 + MySQL AB MySQL 5.1.14 + MySQL AB MySQL 5.1.13 + MySQL AB MySQL 5.1.12 + MySQL AB MySQL 5.1.11 + MySQL AB MySQL 5.1.10 + MySQL AB MySQL 5.1.9 + MySQL AB MySQL 5.1.6 + MySQL AB MySQL 5.1.5 + MySQL AB MySQL 5.0.52 + MySQL AB MySQL 5.0.51 + MySQL AB MySQL 5.0.50 + MySQL AB MySQL 5.0.49 + MySQL AB MySQL 5.0.48 + MySQL AB MySQL 5.0.47 + MySQL AB MySQL 5.0.46 + MySQL AB MySQL 5.0.45 + MySQL AB MySQL 5.0.45 + MySQL AB MySQL 5.0.44 + MySQL AB MySQL 5.0.42 + MySQL AB MySQL 5.0.40 + MySQL AB MySQL 5.0.39 + MySQL AB MySQL 5.0.38 + MySQL AB MySQL 5.0.37 + MySQL AB MySQL 5.0.36 + MySQL AB MySQL 5.0.33 + MySQL AB MySQL 5.0.32 + MySQL AB MySQL 5.0.27 + MySQL AB MySQL 5.0.24 + MySQL AB MySQL 5.0.22 -1-0.1 + MySQL AB MySQL 5.0.22 + MySQL AB MySQL 5.0.21 + MySQL AB MySQL 5.0.20 + MySQL AB MySQL 5.0.19 + MySQL AB MySQL 5.0.18 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 Mandriva Linux Mandrake 2007.1 x86_64 Mandriva Linux Mandrake 2007.1 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Apple Mac OS X Server 10.5.5
Not Vulnerable:

yaSSL Multiple Remote Buffer Overflow Vulnerabilities

yaSSL is prone to multiple remote buffer-overflow vulnerabilities.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of applications using the library. Failed attacks will cause denial-of-service conditions.

yaSSL 1.7.5 is vulnerable to these issues; other versions are also likely to be affected.

yaSSL Multiple Remote Buffer Overflow Vulnerabilities

Solution:
Please see the referenced advisories for details on obtaining and applying the appropriate updates.


Apple Mac OS X Server 10.5.5

• Apple SecUpdSrvr2008-007.dmg
  http://www.apple.com/support/downloads/securityupdate2008007serverleop ard.html

yaSSL Multiple Remote Buffer Overflow Vulnerabilities

References:

• yaSSL Homepage (yaSSL)
  
• Multiple vulnerabilities in yaSSL 1.7.5 (Luigi Auriemma )
  
• Pre-auth buffer-overflow in mySQL through yaSSL (Luigi Auriemma )