NVD

Id
47374  
Name
CVE-2009-0025  
Description
BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-01-07  
Modified Date
2016-04-04  
Seq
2009-0025  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236875 47374 CVE-2009-0025 http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33  View
236876 47374 CVE-2009-0025 APPLE-SA-2009-05-12  View
236877 47374 CVE-2009-0025 SSRT101004  View
236878 47374 CVE-2009-0025 oval:org.mitre.oval:def:10879  View
236879 47374 CVE-2009-0025 oval:org.mitre.oval:def:5569  View
236880 47374 CVE-2009-0025 FreeBSD-SA-09:04  View
236881 47374 CVE-2009-0025 SSA:2009-014-02  View
236882 47374 CVE-2009-0025 250846  View
236883 47374 CVE-2009-0025 http://support.apple.com/kb/HT3549  View
236884 47374 CVE-2009-0025 http://support.avaya.com/elmodocs2/security/ASA-2009-045.htm  View
236885 47374 CVE-2009-0025 http://wiki.rpath.com/Advisories:rPSA-2009-0009  View
236886 47374 CVE-2009-0025 http://www.ocert.org/advisories/ocert-2008-016.html  View
236887 47374 CVE-2009-0025 http://www.openbsd.org/errata44.html#008_bind  View
236888 47374 CVE-2009-0025 20090107 [oCERT-2008-016] Multiple OpenSSL signature verification API misuses  View
236889 47374 CVE-2009-0025 20090120 rPSA-2009-0009-1 bind bind-utils  View
236890 47374 CVE-2009-0025 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim  View
236891 47374 CVE-2009-0025 33151  View
236892 47374 CVE-2009-0025 TA09-133A  View
236893 47374 CVE-2009-0025 http://www.vmware.com/security/advisories/VMSA-2009-0004.html  View
236894 47374 CVE-2009-0025 ADV-2009-0043  View
236895 47374 CVE-2009-0025 ADV-2009-0366  View
236896 47374 CVE-2009-0025 ADV-2009-0904  View
236897 47374 CVE-2009-0025 ADV-2009-1297  View
236898 47374 CVE-2009-0025 https://issues.rpath.com/browse/RPL-2938  View
236899 47374 CVE-2009-0025 https://www.isc.org/software/bind/advisories/cve-2009-0025  View
236900 47374 CVE-2009-0025 FEDORA-2009-0350  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40605 JVNDB-2009-001611 BIND における証明書チェーンの有効性を回避される脆弱性 BIND には、OpenSSL の DSA_verify 関数からの戻り値が正しくチェックされないため、証明書チェーンの有効性を回避される脆弱性が存在します。 CVE-2009-0025 37456 CVE-2009-0025 47374 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001611.html 2009-01-07 2009-07-08 View