Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2008-01-10T23:00:00
Updated: 2024-08-07T07:39:35.055Z
Reserved: 2008-01-10T00:00:00
Link: CVE-2008-0226
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2008-01-10T23:46:00.000
Modified: 2019-12-17T20:26:08.287
Link: CVE-2008-0226
Redhat
No data.