NVD

Id
47920  
Name
CVE-2009-0591  
Description
The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-03-27  
Modified Date
2016-08-22  
Seq
2009-0591  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240271 47920 CVE-2009-0591 NetBSD-SA2009-008  View
240272 47920 CVE-2009-0591 APPLE-SA-2009-09-10-2  View
240273 47920 CVE-2009-0591 SUSE-SR:2009:010  View
240274 47920 CVE-2009-0591 HPSBUX02435  View
240275 47920 CVE-2009-0591 HPSBOV02540  View
240276 47920 CVE-2009-0591 1021907  View
240277 47920 CVE-2009-0591 http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847  View
240278 47920 CVE-2009-0591 http://support.apple.com/kb/HT3865  View
240279 47920 CVE-2009-0591 http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html  View
240280 47920 CVE-2009-0591 http://www.openssl.org/news/secadv_20090325.txt  View
240281 47920 CVE-2009-0591 http://www.php.net/archive/2009.php#id2009-04-08-1  View
240282 47920 CVE-2009-0591 34256  View
240283 47920 CVE-2009-0591 ADV-2009-0850  View
240284 47920 CVE-2009-0591 ADV-2009-1020  View
240285 47920 CVE-2009-0591 ADV-2009-1175  View
240286 47920 CVE-2009-0591 ADV-2009-1548  View
240287 47920 CVE-2009-0591 openssl-cmsverify-security-bypass(49432)  View
240288 47920 CVE-2009-0591 https://kb.bluecoat.com/index?page=content&id=SA50  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40146 JVNDB-2009-001152 OpenSSL の CMS_verify 関数における不正な署名を正当なものとして処理する脆弱性 OpenSSL の CMS_verify 関数には、CMS を有効にしている場合、悪意のある署名属性に関連するエラーを正しく処理できないため、不正な署名を正当なものとして処理する脆弱性が存在します。 CVE-2009-0591 38022 CVE-2009-0591 47920 2.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001152.html 2009-03-27 2009-10-05 View