Lucene search
Ubuntu.comUB:CVE-2009-0547HistoryFeb 12, 2009 - 12:00 a.m.
CVE-2009-0547
2009-02-1200:00:00
ubuntu.com
ubuntu.com
13
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
78.2%
Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail
text within a signed-data blob, not the copy of the e-mail text displayed
to the user, which allows remote attackers to spoof a signature by
modifying the latter copy, a different vulnerability than CVE-2008-5077.
Bugs
- <http://bugzilla.gnome.org/show_bug.cgi?id=564465>
- <http://bugs.gentoo.org/show_bug.cgi?id=258867>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0547>
- <https://bugzilla.redhat.com/show_bug.cgi?id=492852>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=533386>
Notes
| Author | Note |
|---|---|
| mdeslaur | Patch for CVE-2009-0547 introduces a regression. See links for fix. |
Related
debiancve
debiancve
cve
cve
prion
prion
Design/Logic Flaw
2009-02-12 23:30:00
Input validation
2009-01-07 17:30:00
Input validation
2009-01-07 18:30:00
nessus
nessus
openSUSE Security Update : evolution-data-server (openSUSE-SU-2010:0216-1)
2010-05-07 00:00:00
SuSE 10 Security Update : openssl (ZYPP Patch Number 5949)
2009-09-24 00:00:00
openSUSE Security Update : compat-openssl097g (compat-openssl097g-480)
2009-07-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 0.9.8j-alt1
2009-01-08 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8j-alt1
2009-01-08 00:00:00
Security fix for the ALT Linux 8 package openssl10 version 0.9.8j-alt1
2009-01-08 00:00:00
openvas
openvas
Fedora Core 10 FEDORA-2009-0419 (tqsllib)
2009-01-20 00:00:00
Solaris Update for Kernel 139555-08
2009-06-03 00:00:00
SLES10: Security update for compat-openssl097g
2009-10-13 00:00:00
debian
debian
[SECURITY] [DSA 1701-1] New OpenSSL packages fix cryptographic weakness
2009-01-12 20:03:50
ubuntu
ubuntu
OpenSSL vulnerability
2009-01-07 00:00:00
veracode
veracode
Signature Spoofing
2020-04-10 00:31:25
Man-in-the-Middle (MitM)
2020-04-10 00:30:43
fedora
fedora
[SECURITY] Fedora 9 Update: tqsllib-2.0-5.fc9
2009-01-15 03:07:29
[SECURITY] Fedora 10 Update: openssl-0.9.8g-12.fc10
2009-01-08 04:19:50
[SECURITY] Fedora 10 Update: tqsllib-2.0-5.fc10
2009-01-15 02:55:49
seebug
seebug
OpenSSL 'EVP_VerifyFinal'ε½ζ°ηΎειͺθ―ζΌζ΄
2009-01-08 00:00:00
centos
centos
openssl, openssl096b, openssl097a security update
2009-01-07 22:28:50
openssl, openssl095a, openssl096 security update
2009-02-02 23:30:18
evolution28 security update
2009-03-17 17:19:33
oraclelinux
oraclelinux
openssl security update
2009-01-07 00:00:00
osv
osv
openssl openssl097 - cryptographic weakness
2009-01-12 00:00:00
ubuntucve
ubuntucve
suse
suse
SSL certificate checking bypass in openssl
2009-01-23 16:31:52
gentoo
gentoo
OpenSSL: Certificate validation error
2009-02-12 00:00:00
ntp: Certificate validation error
2009-04-05 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2008-5077
2009-01-07 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:02.openssl
2009-01-07 00:00:00
redhat
redhat
(RHSA-2009:0004) Important: openssl security update
2009-01-07 00:00:00
(RHSA-2009:0354) Moderate: evolution-data-server security update
2009-03-16 00:00:00
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-09:02.openssl
2009-01-09 00:00:00
[ MDVSA-2009:078 ] evolution-data-server
2009-03-24 00:00:00
f5
f5
SOL9889 - NTP vulnerability CVE-2009-0021
2009-04-05 00:00:00
K9889 : NTP vulnerability CVE-2009-0021
2013-03-25 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
78.2%
Related for UB:CVE-2009-0547