Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2009-0025HistoryJan 07, 2009 - 5:30 p.m.
CVE-2009-0025
2009-01-0717:30:00
Debian Security Bug Tracker
security-tracker.debian.org
14
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.2%
BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | bind9 | <Β 1:9.5.1.dfsg.P1-1 | bind9_1:9.5.1.dfsg.P1-1_all.deb |
| Debian | 11 | all | bind9 | <Β 1:9.5.1.dfsg.P1-1 | bind9_1:9.5.1.dfsg.P1-1_all.deb |
| Debian | 10 | all | bind9 | <Β 1:9.5.1.dfsg.P1-1 | bind9_1:9.5.1.dfsg.P1-1_all.deb |
| Debian | 999 | all | bind9 | <Β 1:9.5.1.dfsg.P1-1 | bind9_1:9.5.1.dfsg.P1-1_all.deb |
| Debian | 13 | all | bind9 | <Β 1:9.5.1.dfsg.P1-1 | bind9_1:9.5.1.dfsg.P1-1_all.deb |
Related
prion
prion
Input validation
2009-01-07 17:30:00
Input validation
2009-01-26 15:30:00
Input validation
2009-01-07 17:30:00
openvas
openvas
Slackware: Security Advisory (SSA:2009-014-02)
2012-09-10 00:00:00
Slackware Advisory SSA:2009-014-02 bind
2012-09-11 00:00:00
ISC BIND OpenSSL DSA_verify() Security Bypass Vulnerability
2009-01-15 00:00:00
ubuntucve
ubuntucve
cve
cve
f5
f5
SOL9762 - OpenSSL vulnerability - CVE-2008-5077
2009-03-03 00:00:00
K9754 : BIND 9 vulnerability CVE-2009-0025
2013-03-25 00:00:00
K9762 : OpenSSL vulnerability - CVE-2008-5077
2014-05-30 00:00:00
nessus
nessus
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 8.1 / 9.0 / 9.1 / current : bind (SSA:2009-014-02)
2011-05-28 00:00:00
F5 Networks BIG-IP : BIND 9 vulnerability (SOL9754)
2014-10-10 00:00:00
Mandriva Linux Security Advisory : bind (MDVSA-2009:037)
2009-04-23 00:00:00
debiancve
debiancve
securityvulns
securityvulns
[oCERT-2008-016] Multiple OpenSSL signature verification API misuses
2009-01-09 00:00:00
OpenSSL / ntp / bind / boinc certificate validation cryptographic vulnerabilities
2009-02-10 00:00:00
FreeBSD Security Advisory FreeBSD-SA-09:02.openssl
2009-01-09 00:00:00
veracode
veracode
DSA Certificate Validation Bypass
2020-04-10 00:34:40
Man-in-the-Middle (MitM)
2020-04-10 00:30:43
suse
suse
information disclosure in bind
2009-01-22 12:03:42
SSL certificate checking bypass in openssl
2009-01-23 16:31:52
oraclelinux
oraclelinux
bind security update
2009-01-08 00:00:00
openssl security update
2009-01-07 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: bind-9.5.1-1.P1.fc10
2009-01-15 02:59:44
[SECURITY] Fedora 9 Update: tqsllib-2.0-5.fc9
2009-01-15 03:07:29
[SECURITY] Fedora 10 Update: tqsllib-2.0-5.fc10
2009-01-15 02:55:49
centos
centos
bind security update
2009-02-02 23:32:53
bind, caching security update
2009-01-09 23:08:18
openssl, openssl096b, openssl097a security update
2009-01-07 22:28:50
ubuntu
ubuntu
Bind vulnerability
2009-01-09 00:00:00
OpenSSL vulnerability
2009-01-07 00:00:00
debian
debian
[SECURITY] [DSA 1703-1] New bind9 packages fix cryptographic weakness
2009-01-12 21:27:18
[SECURITY] [DSA 1701-1] New OpenSSL packages fix cryptographic weakness
2009-01-12 20:03:29
redhat
redhat
(RHSA-2009:0020) Moderate: bind security update
2009-01-08 00:00:00
(RHSA-2009:0004) Important: openssl security update
2009-01-07 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:04.bind
2009-01-13 00:00:00
FreeBSD-SA-09:02.openssl
2009-01-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.8j-alt1
2009-01-08 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8j-alt1
2009-01-08 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.8j-alt1
2009-01-08 00:00:00
seebug
seebug
OpenSSL 'EVP_VerifyFinal'ε½ζ°ηΎειͺθ―ζΌζ΄
2009-01-08 00:00:00
osv
osv
openssl openssl097 - cryptographic weakness
2009-01-12 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2008-5077
2009-01-07 00:00:00
gentoo
gentoo
OpenSSL: Certificate validation error
2009-02-12 00:00:00
BIND: Incorrect signature verification
2009-03-09 00:00:00
vmware
vmware
ESX Service Console updates for openssl, bind, and vim
2009-03-31 00:00:00
ESX Service Console updates for openssl, bind, and vim
2009-03-31 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.019 Low
EPSS
Percentile
88.2%
Related for DEBIANCVE:CVE-2009-0025