CVE:CVE-2008-0226
CNNVD:CNNVD-200801-154
yaSSL是用于实现SSL的开源软件包。
yaSSL（用于MySQL或其他产品） 1.7.5及之前版本中存在缓冲区错误漏洞。远程攻击者可利用该漏洞执行任意代码。
solution:Upgrade yassl yassl to a higher version than 1.7.5,and avoid the version (,1.7.5]; Upgrade mysql mysql to a higher version than 5.0.0,5.0.1,5.0.2,5.0.3,5.0.4,5.0.5,5.0.10,5.0.15,5.0.16,5.0.17,5.0.20,5.0.24,5.0.30,5.0.36,5.0.44,5.0.54,5.0.56,5.0.60,5.0.66,5.1.5,and avoid the version 5.0.0,5.0.1,5.0.2,5.0.3,5.0.4,5.0.5,5.0.10,5.0.15,5.0.16,5.0.17,5.0.20,5.0.24,5.0.30,5.0.36,5.0.44,5.0.54,5.0.56,5.0.60,5.0.66,5.1.5; Upgrade oracle mysql to a higher version than 5.0.23,5.0.25,5.0.26,5.0.28,5.0.30:sp1,5.0.32,5.0.34,5.0.36:sp1,5.0.38,5.0.40,5.0.41,5.0.42,5.0.44:sp1,5.0.45,5.0.46,5.0.48,5.0.50,5.0.50:sp1,5.0.51,5.0.52,5.0.56:sp1,5.0.58,5.0.60:sp1,5.0.62,5.0.64,5.0.66:sp1,5.1,5.1.1,5.1.2,5.1.3,5.1.4,5.1.6,5.1.7,5.1.8,5.1.9,5.1.10,5.1.11,5.1.12,5.1.13,5.1.14,5.1.15,5.1.16,5.1.17,5.1.18,5.1.19,5.1.20,5.1.21,5.1.22,and avoid the version 5.0.23,5.0.25,5.0.26,5.0.28,5.0.30:sp1,5.0.32,5.0.34,5.0.36:sp1,5.0.38,5.0.40,5.0.41,5.0.42,5.0.44:sp1,5.0.45,5.0.46,5.0.48,5.0.50,5.0.50:sp1,5.0.51,5.0.52,5.0.56:sp1,5.0.58,5.0.60:sp1,5.0.62,5.0.64,5.0.66:sp1,5.1,5.1.1,5.1.2,5.1.3,5.1.4,5.1.6,5.1.7,5.1.8,5.1.9,5.1.10,5.1.11,5.1.12,5.1.13,5.1.14,5.1.15,5.1.16,5.1.17,5.1.18,5.1.19,5.1.20,5.1.21,5.1.22; Upgrade apple mac_os_x to a higher version than 10.5.4,and avoid the version 10.5.4; Upgrade debian debian_linux to a higher version than 5.0,and avoid the version 5.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,6.10,7.04,7.10,and avoid the version 6.06,6.10,7.04,7.10