Lucene search

K

[email protected]NVD:CVE-2009-3456

HistorySep 29, 2009 - 6:00 p.m.

CVE-2009-3456

2009-09-2918:00:00

CWE-310

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a ‘\0’ character in a domain name in the subject’s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

NVD

Node

googlechromeRange≤3.0.195.21

OR

googlechromeMatch0.2.149.27

OR

googlechromeMatch0.2.149.29

OR

googlechromeMatch0.2.149.30

OR

googlechromeMatch0.2.152.1

OR

googlechromeMatch0.2.153.1

OR

googlechromeMatch0.3.154.0

OR

googlechromeMatch0.3.154.3

OR

googlechromeMatch0.4.154.18

OR

googlechromeMatch0.4.154.22

OR

googlechromeMatch0.4.154.31

OR

googlechromeMatch0.4.154.33

OR

googlechromeMatch1.0.154.36

OR

googlechromeMatch1.0.154.39

OR

googlechromeMatch1.0.154.42

OR

googlechromeMatch1.0.154.43

OR

googlechromeMatch1.0.154.46

OR

googlechromeMatch1.0.154.48

OR

googlechromeMatch1.0.154.52

OR

googlechromeMatch1.0.154.53

OR

googlechromeMatch1.0.154.59

OR

googlechromeMatch1.0.154.65

OR

googlechromeMatch2.0.156.1

OR

googlechromeMatch2.0.157.0

OR

googlechromeMatch2.0.157.2

OR

googlechromeMatch2.0.158.0

OR

googlechromeMatch2.0.159.0

OR

googlechromeMatch2.0.169.0

OR

googlechromeMatch2.0.169.1

OR

googlechromeMatch2.0.170.0

OR

googlechromeMatch2.0.172

OR

googlechromeMatch2.0.172.2

OR

googlechromeMatch2.0.172.8

OR

googlechromeMatch2.0.172.27

OR

googlechromeMatch2.0.172.28

OR

googlechromeMatch2.0.172.30

OR

googlechromeMatch2.0.172.31

OR

googlechromeMatch2.0.172.33

OR

googlechromeMatch2.0.172.37

OR

googlechromeMatch2.0.172.38

OR

googlechromeMatch3.0.182.2

OR

googlechromeMatch3.0.190.2

OR

googlechromeMatch3.0.193.2beta

References

www.securityfocus.com/bid/36479

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

Related for NVD:CVE-2009-3456

cve20 cvelist11 debiancve11 prion12 nessus44 openvas52 threatpost1 veracode2 nvd15 seebug2 mozilla1 exploitdb1 ubuntucve15 securityvulns4 aix1 debian3 f53 talos1