Lucene search

CVE-2009-3291

🗓️ 22 Sep 2009 00:00:00Reported by ubuntu.comType

PHP before 5.2.11 allows spoofing of certificates via embedded NUL character in X509 certificate's CommonName or subjectAltName

Reporter	Title	Published	Views	Family All 81
NVD	CVE-2009-3291	22 Sep 200910:30	–	nvd
CVE	CVE-2009-3291	22 Sep 200910:30	–	cve
Prion	Code injection	22 Sep 200910:30	–	prion
Cvelist	CVE-2009-3291	22 Sep 200910:00	–	cvelist
Veracode	Spoofing Attack	10 Apr 202000:42	–	veracode
securityvulns	[ MDVSA-2009:248 ] php	28 Sep 200900:00	–	securityvulns
securityvulns	PHP multiple security vulnerabilities	20 Oct 200900:00	–	securityvulns
OpenVAS	FreeBSD Ports: php5	19 Oct 200900:00	–	openvas
OpenVAS	Slackware Advisory SSA:2009-276-02 php	11 Sep 201200:00	–	openvas
OpenVAS	Mandrake Security Advisory MDVSA-2009:248 (php)	28 Sep 200900:00	–	openvas

Source	Link
php	www.php.net/ChangeLog-5.php
ubuntu	www.ubuntu.com/security/notices/USN-862-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2009-3291
launchpad	www.launchpad.net/bugs/cve/CVE-2009-3291
security-tracker	www.security-tracker.debian.org/tracker/CVE-2009-3291

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	6.06	noarch	php5	5.1.2-1ubuntu3.17	UNKNOWN
ubuntu	8.04	noarch	php5	5.2.4-2ubuntu5.9	UNKNOWN
ubuntu	8.10	noarch	php5	5.2.6-2ubuntu4.5	UNKNOWN
ubuntu	9.04	noarch	php5	5.2.6.dfsg.1-3ubuntu4.4	UNKNOWN
ubuntu	9.10	noarch	php5	5.2.10.dfsg.1-2ubuntu6.3	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Sep 2009 00:00Current

2.7Low risk

Vulners AI Score2.7

CVSS27.5

EPSS0.012