NVD

Id
48692  
Name
CVE-2009-1416  
Description
lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-30  
Modified Date
2009-06-10  
Seq
2009-1416  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
245986 48692 CVE-2009-1416 [gnutls-devel] 20090430 All DSA keys generated using GnuTLS 2.6.x are corrupt [GNUTLS-SA-2009-2] [CVE-2009-1416]  View
245987 48692 CVE-2009-1416 [help-gnutls] 20090420 Encryption using DSA keys  View
245988 48692 CVE-2009-1416 GLSA-200905-04  View
245989 48692 CVE-2009-1416 MDVSA-2009:116  View
245990 48692 CVE-2009-1416 34783  View
245991 48692 CVE-2009-1416 1022158  View
245992 48692 CVE-2009-1416 ADV-2009-1218  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42351 JVNDB-2009-003358 GnuTLS の libgnutls の lib/gnutls_pk.c における証明書上の署名を偽装される脆弱性 GnuTLS の libgnutls の lib/gnutls_pk.c は、DSA 鍵の替わりに DSA 構造内に格納された RSA 鍵を生成するため、証明書上の署名を偽装される脆弱性が存在します。 CVE-2009-1416 38847 CVE-2009-1416 48692 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003358.html 2009-04-20 2012-06-26 View