CVE-2009-4028

Executive Summary

Informations
Name	CVE-2009-4028	First vendor Publication	2009-11-30
Vendor	Cve	Last vendor Modification	2011-06-24

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028

CWE : Common Weakness Enumeration

id	Name
CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:8510

Oval ID:	oval:org.mitre.oval:def:8510
Title:	MySQL 5.0 and 5.1 Clients with OpenSSL Vulnerability Allows Bypassing Server Certificate Checking
Description:	The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-4028	Version:	1
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008	Product(s):	MySQL Server 5.0 MySQL Server 5.1
Definition Synopsis:
IF MySQL 5.0 is installed AND MySQL Server 5.0 version is less than 5.0.88 OR MySQL 5.1 is installed AND MySQL Server 5.1 version is less than 5.1.41

Definition Id: oval:org.mitre.oval:def:10940

Oval ID:	oval:org.mitre.oval:def:10940
Title:	The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
Description:	The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-4028	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section mysql is earlier than 0:5.0.77-4.el5_4.2 AND mysql-devel is earlier than 0:5.0.77-4.el5_4.2 AND mysql-test is earlier than 0:5.0.77-4.el5_4.2 AND mysql-bench is earlier than 0:5.0.77-4.el5_4.2 AND mysql-server is earlier than 0:5.0.77-4.el5_4.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mysql Mysql cpe:/a:mysql:mysql:5.1.9 cpe:/a:mysql:mysql:5.1.8 cpe:/a:mysql:mysql:5.1.7 cpe:/a:mysql:mysql:5.1.6 cpe:/a:mysql:mysql:5.1.5a cpe:/a:mysql:mysql:5.1.5 cpe:/a:mysql:mysql:5.1.40:sp1 cpe:/a:mysql:mysql:5.1.40 cpe:/a:mysql:mysql:5.1.4 cpe:/a:mysql:mysql:5.1.39 cpe:/a:mysql:mysql:5.1.38 cpe:/a:mysql:mysql:5.1.37 cpe:/a:mysql:mysql:5.1.37:sp1 cpe:/a:mysql:mysql:5.1.36 cpe:/a:mysql:mysql:5.1.35 cpe:/a:mysql:mysql:5.1.34:sp1 cpe:/a:mysql:mysql:5.1.34 cpe:/a:mysql:mysql:5.1.33 cpe:/a:mysql:mysql:5.1.32-bzr cpe:/a:mysql:mysql:5.1.32 cpe:/a:mysql:mysql:5.1.31 cpe:/a:mysql:mysql:5.1.31:sp1 cpe:/a:mysql:mysql:5.1.30 cpe:/a:mysql:mysql:5.1.3 cpe:/a:mysql:mysql:5.1.29 cpe:/a:mysql:mysql:5.1.28 cpe:/a:mysql:mysql:5.1.27 cpe:/a:mysql:mysql:5.1.26 cpe:/a:mysql:mysql:5.1.25 cpe:/a:mysql:mysql:5.1.24 cpe:/a:mysql:mysql:5.1.23a cpe:/a:mysql:mysql:5.1.23_bk cpe:/a:mysql:mysql:5.1.23 cpe:/a:mysql:mysql:5.1.23:a cpe:/a:mysql:mysql:5.1.22 cpe:/a:mysql:mysql:5.1.21 cpe:/a:mysql:mysql:5.1.20 cpe:/a:mysql:mysql:5.1.2 cpe:/a:mysql:mysql:5.1.19 cpe:/a:mysql:mysql:5.1.18 cpe:/a:mysql:mysql:5.1.17 cpe:/a:mysql:mysql:5.1.16 cpe:/a:mysql:mysql:5.1.15 cpe:/a:mysql:mysql:5.1.14 cpe:/a:mysql:mysql:5.1.13 cpe:/a:mysql:mysql:5.1.12 cpe:/a:mysql:mysql:5.1.11 cpe:/a:mysql:mysql:5.1.10 cpe:/a:mysql:mysql:5.1.1 cpe:/a:mysql:mysql:5.1 cpe:/a:mysql:mysql:5.0.87 cpe:/a:mysql:mysql:5.0.86 cpe:/a:mysql:mysql:5.0.85 cpe:/a:mysql:mysql:5.0.84 cpe:/a:mysql:mysql:5.0.83 cpe:/a:mysql:mysql:5.0.82 cpe:/a:mysql:mysql:5.0.81 cpe:/a:mysql:mysql:5.0.8 cpe:/a:mysql:mysql:5.0.77 cpe:/a:mysql:mysql:5.0.75 cpe:/a:mysql:mysql:5.0.7 cpe:/a:mysql:mysql:5.0.66 cpe:/a:mysql:mysql:5.0.60 cpe:/a:mysql:mysql:5.0.6 cpe:/a:mysql:mysql:5.0.56 cpe:/a:mysql:mysql:5.0.54 cpe:/a:mysql:mysql:5.0.52 cpe:/a:mysql:mysql:5.0.51b cpe:/a:mysql:mysql:5.0.51a cpe:/a:mysql:mysql:5.0.51 cpe:/a:mysql:mysql:5.0.50 cpe:/a:mysql:mysql:5.0.5.0.21 cpe:/a:mysql:mysql:5.0.5 cpe:/a:mysql:mysql:5.0.4a cpe:/a:mysql:mysql:5.0.45 cpe:/a:mysql:mysql:5.0.44 cpe:/a:mysql:mysql:5.0.42 cpe:/a:mysql:mysql:5.0.41 cpe:/a:mysql:mysql:5.0.4 cpe:/a:mysql:mysql:5.0.3a cpe:/a:mysql:mysql:5.0.38 cpe:/a:mysql:mysql:5.0.37 cpe:/a:mysql:mysql:5.0.36 cpe:/a:mysql:mysql:5.0.33 cpe:/a:mysql:mysql:5.0.32 cpe:/a:mysql:mysql:5.0.30:sp1 cpe:/a:mysql:mysql:5.0.30 cpe:/a:mysql:mysql:5.0.3:beta cpe:/a:mysql:mysql:5.0.3 cpe:/a:mysql:mysql:5.0.27 cpe:/a:mysql:mysql:5.0.26 cpe:/a:mysql:mysql:5.0.25 cpe:/a:mysql:mysql:5.0.24a cpe:/a:mysql:mysql:5.0.24 cpe:/a:mysql:mysql:5.0.23 cpe:/a:mysql:mysql:5.0.22.1.0.1 cpe:/a:mysql:mysql:5.0.22 cpe:/a:mysql:mysql:5.0.21 cpe:/a:mysql:mysql:5.0.20a cpe:/a:mysql:mysql:5.0.20 cpe:/a:mysql:mysql:5.0.2 cpe:/a:mysql:mysql:5.0.1a cpe:/a:mysql:mysql:5.0.19 cpe:/a:mysql:mysql:5.0.18 cpe:/a:mysql:mysql:5.0.17a cpe:/a:mysql:mysql:5.0.17 cpe:/a:mysql:mysql:5.0.16a cpe:/a:mysql:mysql:5.0.16 cpe:/a:mysql:mysql:5.0.15a cpe:/a:mysql:mysql:5.0.15 cpe:/a:mysql:mysql:5.0.14 cpe:/a:mysql:mysql:5.0.13 cpe:/a:mysql:mysql:5.0.12 cpe:/a:mysql:mysql:5.0.11 cpe:/a:mysql:mysql:5.0.10a cpe:/a:mysql:mysql:5.0.10 cpe:/a:mysql:mysql:5.0.1 cpe:/a:mysql:mysql:5.0.0.0 cpe:/a:mysql:mysql:5.0.0 cpe:/a:mysql:mysql:5.0.0:alpha cpe:/a:mysql:mysql:5.0	121

Open Source Vulnerability Database (OSVDB)

id	Description
60487	MySQL vio_verify_callback() Function Crafted Certificate MiTM Weakness

Internal Sources (Detail)

Source	Url
CONFIRM	http://bugs.mysql.com/47320 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
MLIST	http://lists.mysql.com/commits/87446 http://marc.info/?l=oss-security&m=125881733826437&w=2 http://www.openwall.com/lists/oss-security/2009/11/19/3 http://www.openwall.com/lists/oss-security/2009/11/23/16
REDHAT	http://www.redhat.com/support/errata/RHSA-2010-0109.html
SUSE	http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
VUPEN	http://www.vupen.com/english/advisories/2010/1107

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-11 00:01:20	Multiple Updates

Type	Count
Oval ID(s)	2
CPE ID(s)	121
osvdb(s)	1

Related	Severity
GLSA-201201-02	(High)
RHSA-2010:0109	(Medium)
MDVSA-2010:012	(Medium)
MDVSA-2010:011	(Medium)

Same Subject	Severity
Login to view 33 more Alert(s)

CVE-2009-4028

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Open Source Vulnerability Database (OSVDB)

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU