Description

OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970.

Remediation

References

CVE-2009-0653

Related Vulnerabilities

Oracle Database Server CVE-2006-0260 Vulnerability (CVE-2006-0260)

WordPress Plugin AccessPress Social Icons Multiple Cross-Site Scripting Vulnerabilities (1.5.5)

Dotclear Improper Authentication Vulnerability (CVE-2014-3781)

Liferay Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-28884)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-20445)

Severity

High

Classification

CVE-2009-0653 CWE-287

Tags

Missing Update Known Vulnerabilities