CVE-2009-4028

MySQL <5.0.88, <5.1.41 - Man-in-the-Middle

Title source: llm
STIX 2.1

Description

The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.

References (12)

Core 12
Core References
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/19/3
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2009/11/23/16
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8510
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2010-0109.html
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1107
Exploit mailing-list x_refsource_mlist
http://lists.mysql.com/commits/87446
Various Sources x_refsource_confirm
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
Various Sources x_refsource_confirm
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=125881733826437&w=2
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10940
Various Sources x_refsource_confirm
http://bugs.mysql.com/47320

Scores

EPSS 0.0177
EPSS Percentile 75.4%

Details

CWE
CWE-20
Status published
Products (50)
mysql/mysql 5.0.0
mysql/mysql 5.0.1
mysql/mysql 5.0.2
mysql/mysql 5.0.3
mysql/mysql 5.0.4
mysql/mysql 5.0.5
mysql/mysql 5.0.5.0.21
mysql/mysql 5.0.10
mysql/mysql 5.0.15
mysql/mysql 5.0.16
... and 40 more
Published Nov 30, 2009
Tracked Since Feb 18, 2026