BID:37974

RETIRED: yaSSL SSL Certificate Handling Remote Buffer Overflow Vulnerability

Info

RETIRED: yaSSL SSL Certificate Handling Remote Buffer Overflow Vulnerability

Bugtraq ID:	37974
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 27 2010 12:00AM
Updated:	Jan 27 2010 10:51PM
Credit:	yaSSL
Vulnerable:	yaSSL yaSSL 1.9.6 yaSSL yaSSL 1.7.5 + MySQL AB MySQL 6.0.4 + MySQL AB MySQL 6.0.3 + MySQL AB MySQL 6.0.2 + MySQL AB MySQL 6.0.1 + MySQL AB MySQL 6.0 + MySQL AB MySQL 5.1.23 + MySQL AB MySQL 5.1.22 + MySQL AB MySQL 5.1.18 + MySQL AB MySQL 5.1.17 + MySQL AB MySQL 5.1.16 + MySQL AB MySQL 5.1.15 + MySQL AB MySQL 5.1.14 + MySQL AB MySQL 5.1.13 + MySQL AB MySQL 5.1.12 + MySQL AB MySQL 5.1.11 + MySQL AB MySQL 5.1.10 + MySQL AB MySQL 5.1.9 + MySQL AB MySQL 5.1.6 + MySQL AB MySQL 5.1.5 + MySQL AB MySQL 5.0.52 + MySQL AB MySQL 5.0.51 + MySQL AB MySQL 5.0.50 + MySQL AB MySQL 5.0.49 + MySQL AB MySQL 5.0.48 + MySQL AB MySQL 5.0.47 + MySQL AB MySQL 5.0.46 + MySQL AB MySQL 5.0.45 + MySQL AB MySQL 5.0.45 + MySQL AB MySQL 5.0.44 + MySQL AB MySQL 5.0.42 + MySQL AB MySQL 5.0.40 + MySQL AB MySQL 5.0.39 + MySQL AB MySQL 5.0.38 + MySQL AB MySQL 5.0.37 + MySQL AB MySQL 5.0.36 + MySQL AB MySQL 5.0.33 + MySQL AB MySQL 5.0.32 + MySQL AB MySQL 5.0.27 + MySQL AB MySQL 5.0.24 + MySQL AB MySQL 5.0.22 -1-0.1 + MySQL AB MySQL 5.0.22 + MySQL AB MySQL 5.0.21 + MySQL AB MySQL 5.0.20 + MySQL AB MySQL 5.0.19 + MySQL AB MySQL 5.0.18 yaSSL yaSSL 1.0.6 yaSSL yaSSL 1.0.5 yaSSL yaSSL 1.0.4 yaSSL yaSSL 1.0.3 yaSSL yaSSL 1.0.2 yaSSL yaSSL 1.0.1 yaSSL yaSSL 1.0

Not Vulnerable:	yaSSL yaSSL 1.9.9

Discussion

RETIRED: yaSSL SSL Certificate Handling Remote Buffer Overflow Vulnerability

yaSSL is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of an affected application. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This vulnerability may be related to BID 37974 (MySQL with yaSSL SSL Certificate Handling Remote Stack Buffer Overflow Vulnerability).

Versions prior to yaSSL 1.9.9 are vulnerable.

Applications that use the yaSSL library may also be affected.

This BID is being retired as a duplicate of BID 37943 (MySQL with yaSSL SSL Certificate Handling Remote Stack Buffer Overflow Vulnerability)

Exploit / POC

RETIRED: yaSSL SSL Certificate Handling Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Solution / Fix

RETIRED: yaSSL SSL Certificate Handling Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

yaSSL yaSSL 1.0