medium5.0
CVE-2009-0051
ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the …
Impact
ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zxid | Zxid | through 0.29 Versions 0.1, 0.2, 0.3, 0.4, 0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ocert.org/advisories/ocert-2008-016.html
- http://www.securityfocus.com/archive/1/499827/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47837
- http://www.ocert.org/advisories/ocert-2008-016.html
- http://www.securityfocus.com/archive/1/499827/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47837