CVE-2008-0226: Buffer Overflow
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "inputbuffer& operator>>" in yasslimp.cpp.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0226?
CVE-2008-0226 is considered a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2008-0226?
To fix CVE-2008-0226, upgrade yaSSL to version 1.7.6 or later, and ensure your MySQL server is updated to a patched version.
What software is affected by CVE-2008-0226?
CVE-2008-0226 affects yaSSL versions 1.7.5 and earlier, and various versions of MySQL such as 5.0.5 and up to 5.1.22.
Can CVE-2008-0226 be exploited remotely?
Yes, CVE-2008-0226 can be exploited remotely, which poses significant risk if the systems are publicly accessible.
What types of attacks are possible due to CVE-2008-0226?
CVE-2008-0226 can lead to buffer overflow attacks, potentially allowing attackers to execute arbitrary code on the affected system.