DB: MySQL YaSSL SSL Hello Message Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the MySQL Server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

yaSSL is prone to multiple remote buffer-overflow vulnerabilities. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of applications using the library. Failed attacks will cause denial-of-service conditions. yaSSL 1.7.5 is vulnerable to these issues; other versions are also likely to be affected.

Affected Products

Debian linux

References

BugTraq: 27140

CVE: CVE-2008-0226

Short Name

DB:MYSQL:YASSL-HELLO-BO

Severity

Major

Recommended

False

Recommended Action

Drop

DB: MySQL YaSSL SSL Hello Message Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?