MySQL Connector/Net SSL Certificate Validation Security Bypass Vulnerability

Bugtraq ID:	35514
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 17 2009 12:00AM
Updated:	Jun 29 2009 03:39PM
Credit:	Wes Henderson
Vulnerable:	MySQL AB MySQL Connector/Net 6.0 MySQL AB MySQL Connector/Net 5.0
Not Vulnerable:	MySQL AB MySQL Connector/Net 6.0.4

MySQL Connector/Net SSL Certificate Validation Security Bypass Vulnerability

MySQL Connector/Net is prone to a security-bypass vulnerability because the application fails to properly validate SSL certificates from a server.

Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

Versions prior to MySQL Connector/Net 6.0.4 are vulnerable.

MySQL Connector/Net SSL Certificate Validation Security Bypass Vulnerability

An attacker can use readily available network utilities to exploit this issue.

MySQL Connector/Net SSL Certificate Validation Security Bypass Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

MySQL Connector/Net SSL Certificate Validation Security Bypass Vulnerability

References:

• Connector/Net 6.0 (MySQL AB)
  
• MySQL Homepage (Oracle)
  
• SSL Certificate Validation is Missing, Causing Security Vulnerability (MySQL AB)