NVD

Id
51181  
Name
CVE-2009-4028  
Description
The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-11-30  
Modified Date
2011-06-24  
Seq
2009-4028  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259614 51181 CVE-2009-4028 http://bugs.mysql.com/47320  View
259615 51181 CVE-2009-4028 http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html  View
259616 51181 CVE-2009-4028 http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html  View
259617 51181 CVE-2009-4028 [commits] 20091020 bzr commit into mysql-4.1 branch (joro:2709) Bug#47320  View
259618 51181 CVE-2009-4028 SUSE-SR:2010:011  View
259619 51181 CVE-2009-4028 [oss-security] 20091121 CVE Request - MySQL - 5.0.88  View
259620 51181 CVE-2009-4028 oval:org.mitre.oval:def:10940  View
259621 51181 CVE-2009-4028 oval:org.mitre.oval:def:8510  View
259622 51181 CVE-2009-4028 [oss-security] 20091119 mysql-5.1.41  View
259623 51181 CVE-2009-4028 [oss-security] 20091123 Re: mysql-5.1.41  View
259624 51181 CVE-2009-4028 RHSA-2010:0109  View
259625 51181 CVE-2009-4028 ADV-2010-1107  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41391 JVNDB-2009-002398 MySQL における SSL サーバになりすまされる脆弱性 MySQL の vio_verify_callback 関数には、OpenSSL を使用している場合に X.509 証明書の処理に不備があるため、SSL サーバになりすまされる脆弱性が存在します。 CVE-2009-4028 41459 CVE-2009-4028 51181 6.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002398.html 2009-11-04 2010-06-03 View