Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2009-0129
HistoryJan 15, 2009 - 5:30 p.m.

CVE-2009-0129

2009-01-1517:30:00
Debian Security Bug Tracker
security-tracker.debian.org
13

0.002 Low

EPSS

Percentile

58.8%

libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.