NVD

Id
47463  
Name
CVE-2009-0126  
Description
The decrypt_public function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing (BOINC) 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSA_public_decrypt function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-01-15  
Modified Date
2009-03-06  
Seq
2009-0126  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237497 47463 CVE-2009-0126 http://boinc.berkeley.edu/trac/changeset/16883  View
237498 47463 CVE-2009-0126 http://boinc.berkeley.edu/trac/ticket/823  View
237499 47463 CVE-2009-0126 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521  View
237500 47463 CVE-2009-0126 SUSE-SR:2009:003  View
237501 47463 CVE-2009-0126 [oss-security] 20090112 CVE Request -- tsqllib, slurm-llnl, libnasl, libcrypt-openssl-dsa-perl, erlang, boinc-client, m2crypto  View
237502 47463 CVE-2009-0126 https://bugzilla.redhat.com/show_bug.cgi?id=479664  View
237503 47463 CVE-2009-0126 FEDORA-2009-0578  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42169 JVNDB-2009-003176 BOINC のクライアントの lib/crypt.cpp の decrypt_public 関数における証明書チェーンの検証を回避される脆弱性 Berkeley Open Infrastructure for Network Computing (BOINC) のクライアントの lib/crypt.cpp の decrypt_public 関数は、OpenSSL の RSA_public_decrypt 関数からの戻り値をチェックしないため、証明書チェーンの検証を回避される脆弱性が存在します。 CVE-2009-0126 37557 CVE-2009-0126 47463 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003176.html 2009-01-15 2012-06-26 View