ID CVE-2009-4484
Summary Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:mysql:5.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.0:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.0:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.0:alpha:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.0:milestone1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.0:milestone1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.0:milestone2:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.0:milestone2:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.1:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.1:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.1:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.1:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.2:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.2:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.3:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.3:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.3:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.3:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.3:beta:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.4:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.4:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.4:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.4:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.5:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.5:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.10:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.10:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.10:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.10:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.15:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.15:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.15:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.15:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.15:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.15:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.16:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.16:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.16:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.16:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.16:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.17:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.17:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.17:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.17:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.17:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.17:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.18:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.19:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.20:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.20:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.20:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.20:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.21:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.22:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.23:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.24:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.24:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.24:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.24:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.24:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.24:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.25:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.26:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.27:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.28:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.28:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.30:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.30:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.30:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.30:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.34:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.34:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.36:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.36:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.36:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.36:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.36:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.36:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.37:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.40:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.40:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.44:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.44:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.44:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.44:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.44:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.44:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.46:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.46:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.48:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.48:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.50:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.50:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.51:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.51:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.51:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.51:b:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.51:b:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.51a:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.51a:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.51b:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.51b:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.54:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.54:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.54:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.54:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.54:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.54:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.54a:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.54a:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.56:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.56:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.56:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.56:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.56:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.56:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.58:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.58:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.60:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.60:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.60:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.60:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.60:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.60:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.62:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.62:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.64:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.64:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.66:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.66:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.66:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.66:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.66:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.66:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.66:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.66:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.66a:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.66a:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.67:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.67:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.68:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.68:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.70:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.70:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.72:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.72:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.72:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.72:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.72:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.72:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.74:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.74:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.74:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.74:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.74:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.74:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.76:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.76:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.78:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.78:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.79:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.79:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.80:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.80:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.82:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.82:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.82:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.82:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.82:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.82:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.84:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.84:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.84:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.84:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.84:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.84:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.85:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.85:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.86:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.86:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.87:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.87:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.87:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.87:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.87:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.87:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.88:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.88:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.0.89:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.0.89:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.5:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.5:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.5:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.5:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.5a:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.5a:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.8:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.9:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.23:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.23:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.23:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.23:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.23:bk:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.23:bk:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.23_bk:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.23_bk:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.23a:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.23a:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.31:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.31:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.31:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.31:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.32:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.32:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.32:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.32:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.32:bzr:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.32:bzr:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.32-bzr:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.32-bzr:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.34:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.34:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.34:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.34:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.37:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.37:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.37:-:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.37:-:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*
  • cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.2.9:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.2.9:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.9.6:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.9.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.9.8:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.9.8:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:0.9.9:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:0.9.9:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.3.5:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.3.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.3.7:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.4.5:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.5.8:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.5.8:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.6.8:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.8.6:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.8.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.8.8:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.8.8:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.9.6:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.9.6:*:*:*:*:*:*:*
  • cpe:2.3:a:wolfssl:yassl:1.9.8:*:*:*:*:*:*:*
    cpe:2.3:a:wolfssl:yassl:1.9.8:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
  • cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
    cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 09-11-2020 - 20:02)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid
  • 37640
  • 37943
  • 37974
confirm
debian DSA-1997
misc
mlist
  • [commits] 20100113 bzr commit into mysql-5.0-bugteam branch (ramil:2838) Bug#50227
  • [dailydave] 20100106 0day demos
  • [dailydave] 20100126 New db bugs
osvdb 61956
sectrack
  • 1023402
  • 1023513
secunia
  • 37493
  • 38344
  • 38364
  • 38517
  • 38573
ubuntu
  • USN-1397-1
  • USN-897-1
vupen
  • ADV-2010-0233
  • ADV-2010-0236
xf mysql-unspecified-bo(55416)
statements via4
contributor Tomas Hoger
lastmodified 2010-01-26
organization Red Hat
statement Not vulnerable. This issue did not affect the versions of mysql as shipped with Red Hat Enterprise Linux 3, 4, or 5. The packages use OpenSSL and not yaSSL.
Last major update 09-11-2020 - 20:02
Published 30-12-2009 - 21:30
Last modified 09-11-2020 - 20:02
Back to Top