What is CVE-2009-0129?

CVE-2009-0129 is a vulnerability in Perl-Openssl Libcrypt-Openssl-Dsa-Perl, classified under Improper Authentication. Published 2009-01-15.

Is CVE-2009-0129 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Perl-Openssl Libcrypt-Openssl-Dsa-Perl

CVE-2009-0129

libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.

Vulnerability class: Broken Authentication

EPSS: 0.011 (62.8th percentile) — read the EPSS interpretation.

Affected products

Perl-openssl Libcrypt-openssl-dsa-perl — versions _nil_
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

Public proof-of-concept exploits

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_CONFIRM, Exploit)

Frequently asked questions

What is CVE-2009-0129?: CVE-2009-0129 is a vulnerability in Perl-Openssl Libcrypt-Openssl-Dsa-Perl, classified under Improper Authentication. Published 2009-01-15.
Is CVE-2009-0129 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.