Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in…

Description

Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.

Scores

EPSS (exploitation in 30 days)

69.6% · top 0.6% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• n/a
• CWE-787 (opens in a new tab)All about CWE-787 and its CVEs

Affected products

• n/a

  • affected n/a

References (36)

• http://intevydis.com/mysql_overflow1.py.txt (opens in a new tab)x_refsource_MISCx_transferred
• http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 38573 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• USN-1397-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• 37493 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://www.yassl.com/release.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www.yassl.com/news.html#yassl199 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://www.intevydis.com/blog/?p=106 (opens in a new tab)x_refsource_MISCx_transferred
• http://intevydis.com/mysql_demo.html (opens in a new tab)x_refsource_MISCx_transferred
• http://intevydis.blogspot.com/2010/01/mysq-yassl-stack-overflow.html (opens in a new tab)x_refsource_MISCx_transferred
• 38364 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 38517 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://yassl.cvs.sourceforge.net/viewvc/yassl/yassl/taocrypt/src/asn.cpp?r1=1.13&r2=1.14 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 37974 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 1023513 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• USN-897-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• http://www.metasploit.com/modules/exploit/linux/mysql/mysql_yassl_getname (opens in a new tab)x_refsource_MISCx_transferred
• ADV-2010-0236 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• [dailydave] 20100106 0day demos (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• https://bugzilla.redhat.com/show_bug.cgi?id=555313 (opens in a new tab)x_refsource_CONFIRMx_transferred
• http://bugs.mysql.com/bug.php?id=50227 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 37640 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• mysql-unspecified-bo(55416) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• http://www.intevydis.com/blog/?p=57 (opens in a new tab)x_refsource_MISCx_transferred
• http://isc.sans.org/diary.html?storyid=7900 (opens in a new tab)x_refsource_MISCx_transferred
• [commits] 20100113 bzr commit into mysql-5.0-bugteam branch (ramil:2838) Bug#50227 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• 1023402 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• http://dev.mysql.com/doc/refman/5.0/en/news-5-0-90.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 61956 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• http://intevydis.com/vd-list.shtml (opens in a new tab)x_refsource_MISCx_transferred
• 38344 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 37943 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• ADV-2010-0233 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• [dailydave] 20100126 New db bugs (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• DSA-1997 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2009-4484](https://trackcve.app/badge/CVE-2009-4484.svg)](https://trackcve.app/cve/CVE-2009-4484)

Record last updated 7 Aug 2024, 07:01 UTC.