Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MySQL yaSSL TaoCrypt的src/asn.cpp CertDecoder::GetName函数多个栈缓冲区错误漏洞
Vulnerability Description
Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。该数据库系统具有性能高、成本低、可靠性好等特点。 MySQL 5.0.90之前的5.0.x版本，MySQL 5.1.43之前的5.1.x版本，MySQL 5.5.x至5.5.0-m2版本的mysqld中使用的yaSSL 1.9.9之前版本中的TaoCrypt的src/asn.cpp中的CertDecoder::GetName函数中存在多个基于栈的缓冲区溢出漏洞。远程攻击者可通过建立一个SSL连接并发送带有特制名称字段的
CVSS Information
N/A
Vulnerability Type
N/A