Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MySQL Improper Input Validation Vulnerability - CVE-2009-4028 - Vulnerability Database
MySQL

MySQL Improper Input Validation Vulnerability - CVE-2009-4028

Medium
Reference: CVE-2009-4028
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-4028
Title: MySQL Improper Input Validation Vulnerability
Overview:

The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 when OpenSSL is used accepts a value of zero for the depth of X.509 certificates which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificate as demonstrated by a certificate presented by a server linked against the yaSSL library.