Buffer overflow in Apple Mac_os_x
CVE-2008-0226
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator…
Vulnerability class: Buffer Overflow
EPSS: 0.916 (99.8th percentile) — read the EPSS interpretation.
Affected products
- Apple Mac_os_x — versions 10.5.4
- Mysql — versions 5.0.0, 5.0.1, 5.0.2
- Oracle Mysql — versions 5.0.23, 5.0.25, 5.0.26
- Yassl
- Canonical Ubuntu_linux — versions 6.06, 6.10, 7.04
- Debian Debian_linux — versions 5.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
- cve@mitre.org (Third Party Advisory, x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (Permissions Required, x_refsource_CONFIRM)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
- cve@mitre.org (Permissions Required, vdb-entry, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2008-0226?
- CVE-2008-0226 is a vulnerability in Apple Mac_os_x, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2008-01-10.
- Is CVE-2008-0226 known to be exploited?
- 15 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.