Vulnerability in N/a
CVE-2009-4484
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other…
EPSS: 0.758 (98.9th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- intevydis.com/mysql_overflow1.py.txt (x_refsource_MISC)
- dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html (x_refsource_CONFIRM)
- 38573 (x_refsource_SECUNIA, third-party-advisory)
- USN-1397-1 (x_refsource_UBUNTU, vendor-advisory)
- 37493 (x_refsource_SECUNIA, third-party-advisory)
- www.yassl.com/release.html (x_refsource_CONFIRM)
- www.yassl.com/news.html (x_refsource_CONFIRM)
- bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1 (x_refsource_CONFIRM)
- www.intevydis.com/blog/ (x_refsource_MISC)
- intevydis.com/mysql_demo.html (x_refsource_MISC)
Frequently asked questions
- What is CVE-2009-4484?
- CVE-2009-4484 is a vulnerability in N/a. Published 2009-12-30.
- Is CVE-2009-4484 known to be exploited?
- 9 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.