SB2016042701 - Spoofing attack in MySQL

Description

This security bulletin contains information about 1 security vulnerability.

1) Spoofing attack (CVE-ID: CVE-2016-2047)

The vulnerability allows a remote attacker to gain to perform a MitM attack.

The vulnerability exists due to improper validation of server hostname in Common Name (CN) or subjectAltName field of X.509 certificate in ssl_verify_server_cert() function in sql-common/client.c. A remote attacker can create a specially crafted certificate and spoof SSL server via multiple CN strings within one filed, e.g. "/OU=/CN=bar.com/CN=foo.com".

Successful exploitation of this vulnerability may allow an attacker to perform Man-in-the-Middle (MitM) attack and intercept SSL traffic and perform spoofing attack.

Remediation

Install update from vendor's website.

References

• http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
• http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html