Description

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970.

Remediation

References

CVE-2009-0653

Related Vulnerabilities

Python Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-4472)

WordPress Plugin YITH WooCommerce Bulk Product Editing Security Bypass (1.2.13)

ownCloud CVE-2017-9339 Vulnerability (CVE-2017-9339)

Oracle JRE CVE-2014-0432 Vulnerability (CVE-2014-0432)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4863)

Severity

High

Classification

CVE-2009-0653 CWE-287

Tags

Missing Update Known Vulnerabilities