CVE-2009-0130

The erlang software component contains a vulnerability in lib/crypto/c_src/crypto_drv.c where it fails to properly check the return value from the OpenSSL DSA_do_verify function. This flaw could allow remote attackers to bypass certificate chain validation using a malformed SSL/TLS signature, a b...