PT-2009-2820 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: M2Crypto affected versions not specified Description: The issue is related to the improper checking of return values from certain OpenSSL functions, which could potentially allow remote attackers to bypass certificate chain validation via a...

NTP EVP_VerifyFinal() Security Bypass Vulnerability

This host has NTP installed and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbntpsecbypassvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ NTP EVPVerifyFinal Security Bypass Vulnerability Authors: Chandan S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

ISC BIND OpenSSL DSA_verify() Security Bypass Vulnerability

ISC BIND is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

PT-2009-2819 · Tenable +1 · Nessus Attack Scripting Language Library +1

Name of the Vulnerable Software and Affected Versions: Nessus Attack Scripting Language library aka libnasl version 2.2.11 Description: The issue concerns a potential problem in the Nessus Attack Scripting Language library where the return value from the OpenSSL DSA do verify function is not...

GnuTLS: Certificate validation error

Background GnuTLS is an open-source implementation of TLS 1.0 and SSL 3.0. Description Martin von Gagern reported that the gnutlsx509verifycertificate function in lib/x509/verify.c trusts certificate chains in which the last certificate is an arbitrary trusted, self-signed certificate. Impact A...

RedHat Security Advisory RHSA-2009:0020

The remote host is missing updates announced in advisory RHSA-2009:0020. A flaw was discovered in the way BIND checked the return value of the OpenSSL DSAdoverify function. On systems using DNSSEC, a malicious zone could present a malformed DSA certificate and bypass proper certificate validation...

Ubuntu: Security Advisory (USN-705-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2009-0050

Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSAverify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077...

CVE-2009-0049

Belgian eID middleware eidlib 2.6.0 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to...

CVE-2009-0046

Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077...

CVE-2009-0051

Public details for CVE-2009-0051 are not provided in the connected documents. Technical specifics (affected product/version/root cause/impact) are not available here—monitor for updates from vendors and advisories.

CVE-2009-0050

Technical details for CVE-2009-0050 are not publicly available in the provided documents. Monitor for updates.

CVE-2009-0046

Technical details about CVE-2009-0046 are not publicly available in the connected documents provided. Monitor for updates from vendor advisories and CVE trackers to obtain affected products, components, and remediation.

CVE-2009-0046

Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077...

CVE-2009-0048

OpenEvidence 1.0.6 and earlier are affected by CVE-2009-0048 due to not properly checking the return value from OpenSSL EVP_VerifyFinal, enabling remote attackers to bypass certificate-chain validation via a malformed SSL/TLS signature for DSA and ECDSA keys. Root cause: failed validation check i...

DEBIAN-CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

CVE-2008-5077

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...

CVE-2009-0021

CVE-2009-0021 affects NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150, where OpenSSL EVP_VerifyFinal return value is not properly checked, allowing remote attackers to bypass SSL/TLS certificate-chain validation for DSA/ECDSA keys. The issue is similar to CVE-2008-5077. Remediation details in...

OpenSSL Incorrect checks for malformed signatures

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys...