EUVD-2009-0135

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

decrypt_public function in BOINC versions lacks certificate chain validation allowing remote attacks

Reporter	Title	Published	Views	Family All 24
CVE	CVE-2009-0126	15 Jan 200917:00	–	cve
Cvelist	CVE-2009-0126	15 Jan 200917:00	–	cvelist
Debian	[SECURITY] [DSA 1718-1] New boinc packages fix validation bypass	8 Feb 200921:31	–	debian
Debian CVE	CVE-2009-0126	15 Jan 200917:00	–	debiancve
Tenable Nessus	Debian DSA-1718-1 : boinc - incorrect API usage	9 Feb 200900:00	–	nessus
Tenable Nessus	Fedora 9 : boinc-client-6.4.5-2.20081217svn.fc9 (2009-0578)	5 Feb 200900:00	–	nessus
Tenable Nessus	openSUSE Security Update : boinc-client (boinc-client-437)	21 Jul 200900:00	–	nessus
NVD	CVE-2009-0126	15 Jan 200917:30	–	nvd
OpenVAS	SUSE: Security Summary (SUSE-SR:2009:003)	2 Feb 200900:00	–	openvas
OpenVAS	Fedora Core 9 FEDORA-2009-0578 (boinc-client)	10 Feb 200900:00	–	openvas

[
  {
    "enisaIdVendor": [
      {
        "id": "6b9e8f83-8451-344f-81bc-df096a2c6601",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "94003bef-1a73-37fd-9dd8-3b4ab5851233",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2009-0126.html
debian	www.debian.org/security/2009/dsa-1718
secunia	www.secunia.com/advisories/33828
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
secunia	www.secunia.com/advisories/33806
lists	www.lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html
openwall	www.openwall.com/lists/oss-security/2009/01/12/4
boinc	www.boinc.berkeley.edu/trac/changeset/16883
boinc	www.boinc.berkeley.edu/trac/ticket/823
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

07 Oct 2025 00:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25

EPSS0.00502