NVD

Id
47971  
Name
CVE-2009-0642  
Description
ext/openssl/ossl_ocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSP_basic_verify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-02-20  
Modified Date
2010-08-21  
Seq
2009-0642  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240500 47971 CVE-2009-0642 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=513528  View
240501 47971 CVE-2009-0642 oval:org.mitre.oval:def:11450  View
240502 47971 CVE-2009-0642 http://redmine.ruby-lang.org/issues/show/1091  View
240503 47971 CVE-2009-0642 MDVSA-2009:193  View
240504 47971 CVE-2009-0642 RHSA-2009:1140  View
240505 47971 CVE-2009-0642 33769  View
240506 47971 CVE-2009-0642 1022505  View
240507 47971 CVE-2009-0642 USN-805-1  View
240508 47971 CVE-2009-0642 ruby-ocspbasicverify-spoofing(48761)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40332 JVNDB-2009-001338 Ruby の ossl_ocsp.c における X.509 証明書に関する脆弱性 Ruby の ext/openssl/ossl_ocsp.c には、OCSP_basic_verify 関数からの戻り値が適切にチェックされない為、X.509 証明書に関する脆弱性が存在します。 CVE-2009-0642 38073 CVE-2009-0642 47971 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001338.html 2009-02-16 2009-08-06 View