CVE-2009-0047
0.09%V4
2009-01-07
18h00 +00:00
18h00 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Deskripsi CVE
Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
Informasi CVE
Kelemahan Terkait
| Nama Kelemahan | Sumber | |
|---|---|---|
| Improper Authentication When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. |
||
| Category : Cryptographic Issues Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed. |
Metrik
| Metrik | Skor | Tingkat keparahan | CVSS Vektor | Sumber |
|---|---|---|---|---|
| V2 | 5 | AV:N/AC:L/Au:N/C:P/I:N/A:N | nvd@nist.gov |
EPSS
EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.
Skor EPSS
Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.
Persentil EPSS
Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.
Produk yang Disebutkan
Konfigurasi 0
Gale>>Gale >> Version Hingga (termasuk) 0.99
Gale>>Gale >> Version 0.15
Gale>>Gale >> Version 0.15b
Gale>>Gale >> Version 0.15c
Gale>>Gale >> Version 0.16
Gale>>Gale >> Version 0.16a
Gale>>Gale >> Version 0.17
Gale>>Gale >> Version 0.17a
Gale>>Gale >> Version 0.18
Gale>>Gale >> Version 0.18b
Gale>>Gale >> Version 0.18c
Gale>>Gale >> Version 0.19
Gale>>Gale >> Version 0.19a
Gale>>Gale >> Version 0.19b
Gale>>Gale >> Version 0.20a
Gale>>Gale >> Version 0.21
Gale>>Gale >> Version 0.90a
Gale>>Gale >> Version 0.90b
Gale>>Gale >> Version 0.90c
Gale>>Gale >> Version 0.91
Gale>>Gale >> Version 0.91a
Gale>>Gale >> Version 0.91b
Referensi
http://www.securityfocus.com/archive/1/499827/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ
Tags : mailing-list, x_refsource_BUGTRAQ
