CVE-2009-0125

NOTE: this issue has been disputed by the upstream vendor. nasl/naslcrypto2.c in the Nessus Attack Scripting Language library aka libnasl 2.2.11 does not properly check the return value from the OpenSSL DSAdoverify function, which allows remote attackers to bypass validation of the certificate...

DEBIAN-CVE-2009-0130

lib/crypto/csrc/cryptodrv.c in erlang does not properly check the return value from the OpenSSL DSAdoverify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077. NOTE: a package...

DEBIAN-CVE-2009-0126

The decryptpublic function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing BOINC 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSApublicdecrypt function, which allows remote attackers to bypass validation of the certificate chain via a...

CVE-2009-0129

libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSAverify and DSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077...

CVE-2009-0124

Technical details (affected software/versions/root cause/remediation) are not publicly provided in the connected documents. The initial CVE description mentions OpenSSL EVP_VerifyFinal but does not enumerate affected products or fixes within this document set.

CVE-2009-0126

Technical details for CVE-2009-0126 are not present in the provided connected documents. The materials do not specify affected products, root cause, or fixes. Monitor for updates.

CVE-2009-0128

Technical details for CVE-2009-0128 are not publicly available in the provided documents. Monitor for updates.

PT-2009-2819 · Tenable +1 · Nessus Attack Scripting Language Library +1

Name of the Vulnerable Software and Affected Versions: Nessus Attack Scripting Language library aka libnasl version 2.2.11 Description: The issue concerns a potential problem in the Nessus Attack Scripting Language library where the return value from the OpenSSL DSA do verify function is not...

PT-2009-2820 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: M2Crypto affected versions not specified Description: The issue is related to the improper checking of return values from certain OpenSSL functions, which could potentially allow remote attackers to bypass certificate chain validation via a...

NTP EVP_VerifyFinal() Security Bypass Vulnerability

This host has NTP installed and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbntpsecbypassvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ NTP EVPVerifyFinal Security Bypass Vulnerability Authors: Chandan S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

GLSA-200901-10 : GnuTLS: Certificate validation error

The remote host is affected by the vulnerability described in GLSA-200901-10 GnuTLS: Certificate validation error Martin von Gagern reported that the gnutlsx509verifycertificate function in lib/x509/verify.c trusts certificate chains in which the last certificate is an arbitrary trusted,...

ISC BIND OpenSSL DSA_verify() Security Bypass Vulnerability

ISC BIND is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

GnuTLS: Certificate validation error

Background GnuTLS is an open-source implementation of TLS 1.0 and SSL 3.0. Description Martin von Gagern reported that the gnutlsx509verifycertificate function in lib/x509/verify.c trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate. Impact A...

RedHat Security Advisory RHSA-2009:0020

The remote host is missing updates announced in advisory RHSA-2009:0020. A flaw was discovered in the way BIND checked the return value of the OpenSSL DSAdoverify function. On systems using DNSSEC, a malicious zone could present a malformed DSA certificate and bypass proper certificate validation...

Ubuntu: Security Advisory (USN-705-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2009-0050

Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSAverify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077...

CVE-2009-0049

Belgian eID middleware eidlib 2.6.0 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...

CVE-2009-0046

Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077...

CVE-2009-0046

Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077...

CVE-2009-0046

Technical details about CVE-2009-0046 are not publicly available in the connected documents provided. Monitor for updates from vendor advisories and CVE trackers to obtain affected products, components, and remediation.