Lucene search

K
cvelistMitreCVELIST:CVE-2009-0265
HistoryJan 26, 2009 - 3:05 p.m.

CVE-2009-0265

2009-01-2615:05:00
mitre
raw.githubusercontent.com
1

7.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.4%

Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025.