CVE-2009-0127

Technical details about CVE-2009-0127 are not publicly provided in the supplied documents. Monitor for updates for affected components, root cause, and fixes.

CVE-2009-0127

M2Crypto does not properly check the return value from the OpenSSL EVPVerifyFinal, DSAverify, ECDSAverify, DSAdoverify, and ECDSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to...

PT-2009-2820 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: M2Crypto affected versions not specified Description: The issue is related to the improper checking of return values from certain OpenSSL functions, which could potentially allow remote attackers to bypass certificate chain validation via a...