Lucene search
HistoryMay 13, 2009 - 3:30 p.m.
CVE-2009-0161
openssl
ocsp
ruby
certificate validation
remote attackers
spoofing
nvd
cve-2009-0161
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.4%
The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate.
Affected configurations
Node
applemac_os_xMatch10.5.0
ORapplemac_os_xMatch10.5.1
ORapplemac_os_xMatch10.5.2
ORapplemac_os_xMatch10.5.3
ORapplemac_os_xMatch10.5.4
ORapplemac_os_xMatch10.5.5
ORapplemac_os_xMatch10.5.6
ORapplemac_os_x_serverMatch10.4.11
ORapplemac_os_x_serverMatch10.5.0
ORapplemac_os_x_serverMatch10.5.1
ORapplemac_os_x_serverMatch10.5.2
ORapplemac_os_x_serverMatch10.5.3
ORapplemac_os_x_serverMatch10.5.4
ORapplemac_os_x_serverMatch10.5.6
Related
cvelist
cvelist
CVE-2009-0161
2009-05-13 15:14:00
prion
prion
Authentication flaw
2009-05-13 15:30:00
nvd
nvd
CVE-2009-0161
2009-05-13 15:30:00
securityvulns
securityvulns
About the security content of Security Update 2009-002 / Mac OS X v10.5.7
2009-05-14 00:00:00
nessus
nessus
Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities
2009-05-13 00:00:00
openvas
openvas
Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002
2010-05-12 00:00:00
Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002
2010-05-12 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.8 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.4%
Related for CVE-2009-0161