Improper input validation in MySQL
CVE-2009-4028
The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.8 (Medium). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.018 (77.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 77th percentile — 77.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: 0.000
Affected products
- MySQL — versions 5.0.0, 5.0.1, 5.0.2
- Oracle MySQL — versions 5.0.0, 5.0.3, 5.0.6
Weakness classification (CWE)
Public proof-of-concept exploits
References
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:8510 (signature, vdb-entry)
- www.redhat.com/support/errata/RHSA-2010-0109.html (vendor-advisory)
- www.vupen.com/english/advisories/2010/1107 (vdb-entry, Vendor Advisory)
- lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html (vendor-advisory)
- www.openwall.com/lists/oss-security/2009/11/19/3 (mailing-list)
- lists.mysql.com/commits/87446 (mailing-list, Exploit)
- dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
- dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html
- marc.info/ (mailing-list)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:10940 (signature, vdb-entry)
Frequently asked questions
- What is CVE-2009-4028?
- CVE-2009-4028 is a vulnerability in MySQL, classified under Improper Input Validation. Published 2009-11-30.
- Is CVE-2009-4028 known to be exploited?
- 15 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.