Exploitation Summary
EIP tracks 5 public exploits for CVE-2008-0226.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/mysql/mysql_yassl_hello.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in yaSSL (1.7.5 and earlier) bundled with MySQL <= 6.0. It sends a crafted Hello packet to trigger arbitrary code execution via a reverse shell payload.
Description
Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.
Exploits (5)
This exploit targets a stack buffer overflow in yaSSL (1.7.5 and earlier) bundled with MySQL <= 6.0. It sends a crafted Hello packet to trigger arbitrary code execution via a reverse shell payload.
This exploit targets a stack buffer overflow in yaSSL (1.7.5 and earlier) bundled with MySQL <= 6.0. It sends a crafted Hello packet to trigger arbitrary code execution via a reverse shell payload.
This exploit targets a stack overflow in yaSSL (1.7.5 and earlier) bundled with MySQL <= 6.0. It sends a crafted Hello packet to trigger arbitrary code execution via a buffer overflow.
This Metasploit module exploits a stack buffer overflow in yaSSL (1.7.5 and earlier) bundled with MySQL <= 6.0 by sending a crafted SSL Hello packet. It achieves remote code execution by overwriting the return address with a target-specific address and includes a payload encoder to avoid bad characters.
This Metasploit module exploits a stack buffer overflow in yaSSL (1.7.5 and earlier) bundled with MySQL <= 6.0 by sending a crafted Hello packet. It targets a specific return address (0x085967fb) for MySQL 5.0.45-Debian_1ubuntu3.1-log to achieve remote code execution.