CVE-2009-0789

Quick assessment

Copy summary Copy citation

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL 0.9.8k之前版本中存在数字错误漏洞，该漏洞源于程序没有正确处理畸形的ASN.1框架。远程攻击者可通过向证书的公钥中放置畸形的ASN.1框架利用该漏洞造成拒绝服务。

CVE-2009-0789 affects n/a n/a. No confirmed in-the-wild exploitation; assess based on exposure. OpenSSL是OpenSSL团队的一个开源的能够实现安全套接层（SSLv2/v3）和安全传输层（TLSv1）协议的通用加密库。该产品支持多种加密算法，包括对称密码、哈希算法、安全散列算法等。 OpenSSL 0.9.8k之前版本中存在数字错误漏洞，该漏洞源于程序没有正确处理畸形的ASN.1框架。远程攻击者可通过向证书的公钥中放置畸形的ASN.1框架利用该漏 CVE-2009-0789 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2009-0789

I. Basic Information for CVE-2009-0789

Affected Products

II. Public POCs for CVE-2009-0789

III. Intelligence Information for CVE-2009-0789

Vendor Advisories for CVE-2009-0789 (18)

• http://support.apple.com/kb/HT3865 x_refsource_CONFIRM
• http://www.openssl.org/news/secadv_20090325.txt x_refsource_CONFIRM
• http://secunia.com/advisories/36701 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/34411 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/34666 third-party-advisory x_refsource_SECUNIA
• http://www.securityfocus.com/bid/34256 vdb-entry x_refsource_BID
• http://secunia.com/advisories/34460 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42724 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/42733 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/35380 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/35729 third-party-advisory x_refsource_SECUNIA
• http://secunia.com/advisories/35065 third-party-advisory x_refsource_SECUNIA
• http://securitytracker.com/id?1021906 vdb-entry x_refsource_SECTRACK
• http://www.vupen.com/english/advisories/2009/1548 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2009/1020 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2009/1175 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2009/0850 vdb-entry x_refsource_VUPEN
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49433 vdb-entry x_refsource_XF

Mailing List Discussions for CVE-2009-0789 (6)

• http://marc.info/?l=bugtraq&m=124464882609472&w=2 vendor-advisory x_refsource_HP
• 🔗 '[security bulletin] HPSBOV02540 SSRT090249 rev.1 - HP SSL for OpenVMS, Remote Unauthorized Data Inje' - MARC Read full article vendor-advisory x_refsource_HP
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html vendor-advisory x_refsource_SUSE
• http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html vendor-advisory x_refsource_SUSE
• http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html vendor-advisory x_refsource_APPLE

Other References for CVE-2009-0789 (5)

• http://www.php.net/archive/2009.php#id2009-04-08-1 x_refsource_CONFIRM
• https://kb.bluecoat.com/index?page=content&id=SA50 x_refsource_CONFIRM
• http://voodoo-circle.sourceforge.net/sa/sa-20090326-01.html x_refsource_CONFIRM
• http://sourceforge.net/project/shownotes.php?release_id=671059&group_id=116847 x_refsource_CONFIRM
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-008.txt.asc vendor-advisory x_refsource_NETBSD

• https://www.cve.org/CVERecord?id=CVE-2009-0789

Same Patch Batch · n/a · 2009-03-27 · 15 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2009-0789