Description

The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.

Remediation

References

CVE-2009-0591

Related Vulnerabilities

WordPress Plugin Spicy Blogroll Local File Include (1.0.0)

WordPress Plugin Great Restaurant Menu WP SQL Injection (1.4.1)

WordPress Plugin WP Retina 2x Cross-Site Scripting (5.2.0)

Drupal Core 7.x Cross-Site Scripting (7.0 - 7.79)

Plone CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-32633)

Severity

Low

Classification

CVE-2009-0591 CWE-287

Tags

Missing Update Known Vulnerabilities