Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: due to lack of details, it is not clear whether this issue is a duplicate of CVE-2012-0492 or another CVE.

According to its self-reported version number, the remote Junos Space version is prior to 13.1R1. It is, therefore, affected by multiple vulnerabilities related to the installed MySQL version.

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.62. It is, therefore, affected by the following vulnerabilities :

  - An error exists related to the included yaSSL     component that could allow arbitrary code execution.
    (CVE-2012-0882)

  - Errors exist related to 'Server Optimizer',     'Server DML', 'Partition' and, in combination with     InnoDB, 'HANDLER READ NEXT' that could allow denial of     service attacks. (CVE-2012-1688, CVE-2012-1690,     CVE-2012-1703, CVE-2012-2102)

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.22. It is, therefore, affected by the following vulnerabilities :

  - An error exists related to the included yaSSL     component that could allow arbitrary code execution.
    (CVE-2012-0882)

  - Errors exist related to 'Server Optimizer',     'Server DML', 'Partition' and, in combination with     InnoDB, 'HANDLER READ NEXT' that could allow denial of     service attacks. (CVE-2012-1688, CVE-2012-1690,     CVE-2012-1697, CVE-2012-1703, CVE-2012-2102)

ID	Name	Product	Family	Severity
80193	Juniper Junos Space < 13.1R1 MySQL Multiple Vulnerabilities (JSA10601)	Nessus	Junos Local Security Checks	high
58802	MySQL 5.1 < 5.1.62 Multiple Vulnerabilities	Nessus	Databases	medium
58661	MySQL 5.5 < 5.5.22 Multiple Vulnerabilities	Nessus	Databases	high

Detections

Analytics

CVE-2012-0882

critical

Tenable Plugins

high

medium

high