Lucene search

CVE-2009-3291

🗓️ 22 Sep 2009 10:00:30Reported by [email protected]Type

The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation, with potential certificate spoofing risk

Reporter	Title	Published	Views	Family All 81
UbuntuCve	CVE-2009-3291	22 Sep 200900:00	–	ubuntucve
Prion	Code injection	22 Sep 200910:30	–	prion
CVE	CVE-2009-3291	22 Sep 200910:30	–	cve
Cvelist	CVE-2009-3291	22 Sep 200910:00	–	cvelist
Veracode	Spoofing Attack	10 Apr 202000:42	–	veracode
OpenVAS	Mandrake Security Advisory MDVSA-2009:248 (php)	28 Sep 200900:00	–	openvas
OpenVAS	Slackware Advisory SSA:2009-276-02 php	11 Sep 201200:00	–	openvas
OpenVAS	Mandrake Security Advisory MDVSA-2009:248 (php)	28 Sep 200900:00	–	openvas
OpenVAS	FreeBSD Ports: php5	19 Oct 200900:00	–	openvas
OpenVAS	FreeBSD Ports: php5	19 Oct 200900:00	–	openvas

Nvd

Node

php phpRange≤5.2.10

php phpMatch1.0

php phpMatch2.0

php phpMatch2.0b10

php phpMatch3.0

php phpMatch3.0.1

php phpMatch3.0.2

php phpMatch3.0.3

php phpMatch3.0.4

php phpMatch3.0.5

php phpMatch3.0.6

php phpMatch3.0.7

php phpMatch3.0.8

php phpMatch3.0.9

php phpMatch3.0.10

php phpMatch3.0.11

php phpMatch3.0.12

php phpMatch3.0.13

php phpMatch3.0.14

php phpMatch3.0.15

php phpMatch3.0.16

php phpMatch3.0.17

php phpMatch3.0.18

php phpMatch4

php phpMatch4.0

php phpMatch4.0beta_4_patch1

php phpMatch4.0beta1

php phpMatch4.0beta2

php phpMatch4.0beta3

php phpMatch4.0beta4

php phpMatch4.0rc1

php phpMatch4.0rc2

php phpMatch4.0.0

php phpMatch4.0.1

php phpMatch4.0.1patch1

php phpMatch4.0.1patch2

php phpMatch4.0.2

php phpMatch4.0.3

php phpMatch4.0.3patch1

php phpMatch4.0.4

php phpMatch4.0.4patch1

php phpMatch4.0.5

php phpMatch4.0.6

php phpMatch4.0.7

php phpMatch4.0.7rc1

php phpMatch4.0.7rc2

php phpMatch4.0.7rc3

php phpMatch4.0.7rc4

php phpMatch4.1.0

php phpMatch4.1.1

php phpMatch4.1.2

php phpMatch4.2dev

php phpMatch4.2.0

php phpMatch4.2.1

php phpMatch4.2.2

php phpMatch4.2.3

php phpMatch4.3.0

php phpMatch4.3.1

php phpMatch4.3.2

php phpMatch4.3.3

php phpMatch4.3.4

php phpMatch4.3.5

php phpMatch4.3.6

php phpMatch4.3.7

php phpMatch4.3.8

php phpMatch4.3.9

php phpMatch4.3.10

php phpMatch4.3.11

php phpMatch4.4.0

php phpMatch4.4.1

php phpMatch4.4.2

php phpMatch4.4.3

php phpMatch4.4.4

php phpMatch4.4.5

php phpMatch4.4.6

php phpMatch4.4.7

php phpMatch4.4.8

php phpMatch4.4.9

php phpMatch5

php phpMatch5.0rc1

php phpMatch5.0rc2

php phpMatch5.0rc3

php phpMatch5.0.0

php phpMatch5.0.0beta1

php phpMatch5.0.0beta2

php phpMatch5.0.0beta3

php phpMatch5.0.0beta4

php phpMatch5.0.0rc1

php phpMatch5.0.0rc2

php phpMatch5.0.0rc3

php phpMatch5.0.1

php phpMatch5.0.2

php phpMatch5.0.3

php phpMatch5.0.4

php phpMatch5.0.5

php phpMatch5.1.0

php phpMatch5.1.1

php phpMatch5.1.2

php phpMatch5.1.3

php phpMatch5.1.4

php phpMatch5.1.5

php phpMatch5.1.6

php phpMatch5.2.0

php phpMatch5.2.1

php phpMatch5.2.2

php phpMatch5.2.3

php phpMatch5.2.4

php phpMatch5.2.5

php phpMatch5.2.6

php phpMatch5.2.7

php phpMatch5.2.8

php phpMatch5.2.9

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
php	www.php.net/releases/5_2_11.php
secunia	www.secunia.com/advisories/36791
support	www.support.apple.com/kb/HT3937
secunia	www.secunia.com/advisories/40262
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10438
marc	www.marc.info/
securitytracker	www.securitytracker.com/id
lists	www.lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
marc	www.marc.info/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Sep 2009 10:30Current

6.1Medium risk

Vulners AI Score6.1

CVSS27.5

EPSS0.014

CWE-20