CVE-2009-4484: Buffer Overflow
Common Vulnerabilities and Exposures assigned an identifier CVE-2009-4484 to the following vulnerability:
Buffer overflow in the server in MySQL 5.0.51a on Linux allows remote attackers to execute arbitrary code via crafted data to TCP port 3306, as demonstrated by the vdmysql5 module in VulnDisco Pack Professional 8.11. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
References: http://intevydis.blogspot.com/2010/01/jan-4-2010-mysql-exploit-demo.html http://intevydis.com/vd-list.shtml http://isc.sans.org/diary.html?storyid=7900 http://www.securityfocus.com/bid/37640
More details about the issue may be disclosed in about 2 weeks: http://intevydis.blogspot.com/2010/01/jan-72010-0day-awareness.html
Other sources
Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysqloverflow1.py and the vdmysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4484?
CVE-2009-4484 is rated as a critical vulnerability due to the potential for remote code execution.
How can I remediate CVE-2009-4484?
To fix CVE-2009-4484, you should update to the latest version of MySQL or yajSSL that addresses the buffer overflow issue.
Which versions of MySQL are affected by CVE-2009-4484?
CVE-2009-4484 affects MySQL versions 5.0.x before 5.0.90, 5.1.x before 5.1.43, and 5.5.x through 5.5.0-m2.
Is my Debian system vulnerable to CVE-2009-4484?
If you are using an affected version of MySQL or libraries on Debian, your system could be vulnerable to CVE-2009-4484.
What type of vulnerability is CVE-2009-4484?
CVE-2009-4484 is classified as a stack-based buffer overflow vulnerability.