EUVD-2009-3008

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Function in IO-Socket-SSL 1.14 to 1.25 allows bypass of hostname check for certificates

Reporter	Title	Published	Views	Family All 30
CVE	CVE-2009-3024	31 Aug 200920:00	–	cve
Cvelist	CVE-2009-3024	31 Aug 200920:00	–	cvelist
Debian CVE	CVE-2009-3024	31 Aug 200920:00	–	debiancve
Tenable Nessus	GLSA-201101-06 : IO::Socket::SSL: Certificate validation error	17 Jan 201100:00	–	nessus
Tenable Nessus	MDVSA-2009:178 : perl-IO-Socket-SSL	1 Oct 200900:00	–	nessus
Tenable Nessus	Mandriva Linux Security Advisory : perl-IO-Socket-SSL (MDVSA-2009:252-1)	2 Oct 200900:00	–	nessus
Tenable Nessus	openSUSE Security Update : perl-IO-Socket-SSL (perl-IO-Socket-SSL-1264)	9 Sep 200900:00	–	nessus
Tenable Nessus	SuSE 11 Security Update : perl-IO-Socket-SSL (SAT Patch Number 1265)	24 Sep 200900:00	–	nessus
Gentoo Linux	IO::Socket::SSL: Certificate validation error	16 Jan 201100:00	–	gentoo
NVD	CVE-2009-3024	31 Aug 200920:30	–	nvd

[
  {
    "enisaIdVendor": [
      {
        "id": "c8b562db-759c-3e91-a529-2091deb6dfb7",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0196100a-a48e-3389-bf59-be040c1dd471",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2009-3024.html
cpansearch	www.cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.30/Changes
vupen	www.vupen.com/english/advisories/2011/0118
gentoo	www.gentoo.org/security/en/glsa/glsa-201101-06.xml
lists	www.lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html
secunia	www.secunia.com/advisories/42893
openwall	www.openwall.com/lists/oss-security/2009/08/28/1
openwall	www.openwall.com/lists/oss-security/2009/08/29/1
openwall	www.openwall.com/lists/oss-security/2009/08/31/4
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.00202