NVD

Id
4864  
Name
CVE-2008-5077  
Description
OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-01-07  
Modified Date
2016-08-22  
Seq
2008-5077  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30587 4864 CVE-2008-5077 APPLE-SA-2009-05-12  View
30588 4864 CVE-2008-5077 openSUSE-SU-2011:0845  View
30589 4864 CVE-2008-5077 SUSE-SU-2011:0847  View
30590 4864 CVE-2008-5077 SSRT090002  View
30591 4864 CVE-2008-5077 HPSBMA02426  View
30592 4864 CVE-2008-5077 HPSBOV02540  View
30593 4864 CVE-2008-5077 oval:org.mitre.oval:def:6380  View
30594 4864 CVE-2008-5077 oval:org.mitre.oval:def:9155  View
30595 4864 CVE-2008-5077 GLSA-200902-02  View
30596 4864 CVE-2008-5077 SSA:2009-014-01  View
30597 4864 CVE-2008-5077 250826  View
30598 4864 CVE-2008-5077 http://support.apple.com/kb/HT3549  View
30599 4864 CVE-2008-5077 http://support.avaya.com/elmodocs2/security/ASA-2009-038.htm  View
30600 4864 CVE-2008-5077 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=837653  View
30601 4864 CVE-2008-5077 http://voodoo-circle.sourceforge.net/sa/sa-20090123-01.html  View
30602 4864 CVE-2008-5077 http://www.ocert.org/advisories/ocert-2008-016.html  View
30603 4864 CVE-2008-5077 http://www.openssl.org/news/secadv_20090107.txt  View
30604 4864 CVE-2008-5077 RHSA-2009:0004  View
30605 4864 CVE-2008-5077 20090107 [oCERT-2008-016] Multiple OpenSSL signature verification API misuses  View
30606 4864 CVE-2008-5077 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim  View
30607 4864 CVE-2008-5077 33150  View
30608 4864 CVE-2008-5077 1021523  View
30609 4864 CVE-2008-5077 USN-704-1  View
30610 4864 CVE-2008-5077 TA09-133A  View
30611 4864 CVE-2008-5077 http://www.vmware.com/security/advisories/VMSA-2009-0004.html  View
30612 4864 CVE-2008-5077 ADV-2009-0040  View
30613 4864 CVE-2008-5077 ADV-2009-0289  View
30614 4864 CVE-2008-5077 ADV-2009-0362  View
30615 4864 CVE-2008-5077 ADV-2009-0558  View
30616 4864 CVE-2008-5077 ADV-2009-0904  View
30617 4864 CVE-2008-5077 ADV-2009-0913  View
30618 4864 CVE-2008-5077 ADV-2009-1297  View
30619 4864 CVE-2008-5077 ADV-2009-1338  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40604 JVNDB-2009-001610 OpenSSL における証明書チェーンの有効性を回避される脆弱性 OpenSSL には、EVP_VerifyFinal 関数からの戻り値が正しくチェックされないため、証明書チェーンの有効性を回避される脆弱性が存在します。 CVE-2008-5077 35190 CVE-2008-5077 4864 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001610.html 2009-01-07 2012-10-01 View