What’s Vulnerable › Vulnerabilities

CVE-2009-4484

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 69.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-12-30 · updated 2026-06-16
• Weakness: CWE-787

Description

Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.

Affected products

• Canonical Ubuntu Linux: 6.06, 8.04, 8.10, 9.04, 9.10, 10.04 (+3)
• Debian Linux: 4.0, 5.0, 6.0
• MariaDB: from 5.1 before 5.1.42 — fixed in 5.1.42
• MySQL Server: from 5.0.0 before 5.0.90; from 5.1.0 before 5.1.43; 5.0.0-milestone1, 5.0.0-milestone2 — fixed in 5.0.90, 5.1.43
• wolfSSL Yassl: before 1.9.9 — fixed in 1.9.9

How to fix

Upgrade to a fixed version: MariaDB 5.1.42; MySQL Server 5.0.90, 5.1.43; wolfSSL Yassl 1.9.9. Check the vendor advisory for mitigations.

References

• http://archives.neohapsis.com/archives/dailydave/2010-q1/0002.html
• http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.0/revision/2837.1.1
• http://bugs.mysql.com/bug.php?id=50227
• http://dev.mysql.com/doc/refman/5.0/en/news-5-0-90.html
• http://dev.mysql.com/doc/refman/5.1/en/news-5-1-43.html
• http://intevydis.blogspot.com/2010/01/mysq-yassl-stack-overflow.html
• http://intevydis.com/mysql_demo.html
• http://intevydis.com/mysql_overflow1.py.txt
• http://intevydis.com/vd-list.shtml
• http://isc.sans.org/diary.html?storyid=7900
• http://lists.immunitysec.com/pipermail/dailydave/2010-January/006020.html
• http://lists.mysql.com/commits/96697

Get alerted when CVE-2009-4484 or the next vulnerability affects your stack