DB: MySQL SSL Hello Message Overflow

This signature detects attempts to exploit a known vulnerability in a MySQL SSL Hello Message. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

yaSSL is prone to multiple remote buffer-overflow vulnerabilities. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of applications using the library. Failed attacks will cause denial-of-service conditions. yaSSL 1.7.5 is vulnerable to these issues; other versions are also likely to be affected.

Affected Products

Debian linux

References

BugTraq: 27140

CVE: CVE-2008-0226

URL: http://bugs.mysql.com/bug.php?id=33814 http://aluigi.altervista.org/adv/yasslick-adv.txt

Short Name

DB:MYSQL:SSL-OF

Severity

Major

Recommended

False

Recommended Action

Drop

DB: MySQL SSL Hello Message Overflow

Extended Description

Affected Products

References

Found a potential security threat?