CVE-2009-0047

Опубликовано: 07 янв. 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gale:gale:*:*:*:*:*:*:*:*

Версия до 0.99 (включая)

cpe:2.3:a:gale:gale:0.15:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.15b:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.15c:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.16:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.16a:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.17:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.17a:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.18:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.18b:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.18c:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.19:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.19a:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.19b:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.20a:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.21:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.90a:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.90b:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.90c:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.91:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.91a:*:*:*:*:*:*:*

cpe:2.3:a:gale:gale:0.91b:*:*:*:*:*:*:*

EPSS

Процентиль: 25%

0.00088

Низкий

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-7r33-3gh8-245q

github

почти 4 года назад