107 matches found
Input validation
DISPUTED M2Crypto does not properly check the return value from the OpenSSL EVPVerifyFinal, DSAverify, ECDSAverify, DSAdoverify, and ECDSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability...
CVE-2009-0127
M2Crypto does not properly check the return value from the OpenSSL EVPVerifyFinal, DSAverify, ECDSAverify, DSAdoverify, and ECDSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to...
CVE-2009-0127
M2Crypto does not properly check the return value from the OpenSSL EVPVerifyFinal, DSAverify, ECDSAverify, DSAdoverify, and ECDSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to...
CVE-2009-0127
Technical details about CVE-2009-0127 are not publicly provided in the supplied documents. Monitor for updates for affected components, root cause, and fixes.
CVE-2009-0127
M2Crypto does not properly check the return value from the OpenSSL EVPVerifyFinal, DSAverify, ECDSAverify, DSAdoverify, and ECDSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to...
PT-2009-2820 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: M2Crypto affected versions not specified Description: The issue is related to the improper checking of return values from certain OpenSSL functions, which could potentially allow remote attackers to bypass certificate chain validation via a...
CVE-2009-0127: Improper Authentication
M2Crypto does not properly check the return value from the OpenSSL EVPVerifyFinal, DSAverify, ECDSAverify, DSAdoverify, and ECDSAdoverify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to...