CVE-2008-0226

CVSS V2 High 7.5 CVSS V3 None
Description
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.
Overview
  • CVE ID
  • CVE-2008-0226
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2008-01-10T23:46:00
  • Last Modified Date
  • 2019-12-17T20:26:08
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:yassl:yassl:*:*:*:*:*:*:*:* 1 OR 1.7.5
cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:mysql:mysql:5.1.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.28:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.34:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.36:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.40:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.44:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.46:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.48:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.50:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.56:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.58:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.60:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.62:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.64:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.0.66:sp1:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 7.5
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 6.4
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/27140 Third Party Advisory VDB Entry
http://secunia.com/advisories/28324 Not Applicable
http://secunia.com/advisories/28419 Not Applicable
http://www.debian.org/security/2008/dsa-1478 Third Party Advisory
http://secunia.com/advisories/28597 Not Applicable
http://bugs.mysql.com/33814 Permissions Required
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-23.html Not Applicable
http://www.ubuntu.com/usn/usn-588-1 Third Party Advisory
http://secunia.com/advisories/29443 Not Applicable
http://securityreason.com/securityalert/3531 Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:150 Broken Link
http://www.securityfocus.com/bid/31681 Third Party Advisory VDB Entry
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html Mailing List Third Party Advisory
http://secunia.com/advisories/32222 Not Applicable
http://support.apple.com/kb/HT3216 Third Party Advisory
http://www.vupen.com/english/advisories/2008/0560/references Permissions Required
http://www.vupen.com/english/advisories/2008/2780 Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/39431 VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39429 VDB Entry
http://www.securityfocus.com/archive/1/485811/100/0/threaded Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/485810/100/0/threaded Third Party Advisory VDB Entry
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2008-0226
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0226
History
Created Old Value New Value Data Type Notes
2022-05-10 16:56:26 Added to TrackCVE