Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2009-0021
HistoryJan 07, 2009 - 12:00 a.m.

CVE-2009-0021

2009-01-0700:00:00
ubuntu.com
ubuntu.com
10

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.007 Low

EPSS

Percentile

81.0%

JSON

NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check
the return value from the OpenSSL EVP_VerifyFinal function, which allows
remote attackers to bypass validation of the certificate chain via a
malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability
to CVE-2008-5077.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchntp<Β 1:4.2.0a+stable-8.1ubuntu6.1UNKNOWN
ubuntu7.10noarchntp<Β 1:4.2.4p0+dfsg-1ubuntu2.1UNKNOWN
ubuntu8.04noarchntp<Β 1:4.2.4p4+dfsg-3ubuntu2.1UNKNOWN
ubuntu8.10noarchntp<Β 1:4.2.4p4+dfsg-6ubuntu2.2UNKNOWN

Related

nessus 29
openvas 82
f5 2
gentoo 2
fedora 5
nvd 10
cve 9
debiancve 3
slackware 3
prion 10
cvelist 10
securityvulns 4
debian 2
oraclelinux 2
redhat 2
veracode 2
centos 3
freebsd_advisory 2
ubuntu 2
altlinux 4
seebug 1
openssl 1
osv 1
ubuntucve 7
suse 1
nessus
nessus
Fedora 10 : ntp-4.2.4p6-1.fc10 (2009-0544)
2009-04-23 00:00:00
GLSA-200904-05 : ntp: Certificate validation error
2009-04-07 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 8.1 / 9.0 / 9.1 / current : ntp (SSA:2009-014-03)
2009-01-15 00:00:00
openvas
openvas
Fedora Core 9 FEDORA-2009-0547 (ntp)
2009-01-26 00:00:00
Slackware Advisory SSA:2009-014-03 ntp
2012-09-11 00:00:00
Gentoo Security Advisory GLSA 200904-05 (ntp)
2009-04-06 00:00:00
f5
f5
SOL9889 - NTP vulnerability CVE-2009-0021
2009-04-05 00:00:00
K9889 : NTP vulnerability CVE-2009-0021
2013-03-25 00:00:00
gentoo
gentoo
ntp: Certificate validation error
2009-04-05 00:00:00
OpenSSL: Certificate validation error
2009-02-12 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: ntp-4.2.4p6-1.fc10
2009-01-24 02:34:08
[SECURITY] Fedora 9 Update: ntp-4.2.4p6-1.fc9
2009-01-24 02:32:42
[SECURITY] Fedora 9 Update: tqsllib-2.0-5.fc9
2009-01-15 03:07:29
nvd
nvd
CVE-2009-0021
2009-01-07 17:30:00
CVE-2008-5077
2009-01-07 17:30:00
CVE-2009-0048
2009-01-07 18:30:15
cve
cve
CVE-2009-0021
2009-01-07 17:30:00
CVE-2008-5077
2009-01-07 17:30:00
CVE-2009-0025
2009-01-07 17:30:00
debiancve
debiancve
CVE-2009-0021
2009-01-07 17:30:00
CVE-2008-5077
2009-01-07 17:30:00
CVE-2009-0050
2009-01-07 18:30:15
slackware
slackware
ntp
2009-01-14 23:15:12
openssl
2009-01-14 23:14:20
bind
2009-01-14 23:14:51
prion
prion
Input validation
2009-01-07 17:30:00
Input validation
2009-01-07 17:30:00
Input validation
2009-01-15 17:30:00
cvelist
cvelist
CVE-2009-0021
2009-01-07 17:00:00
CVE-2008-5077
2009-01-07 17:00:00
CVE-2009-0129
2022-10-03 16:24:12
securityvulns
securityvulns
[oCERT-2008-016] Multiple OpenSSL signature verification API misuses
2009-01-09 00:00:00
OpenSSL / ntp / bind / boinc certificate validation cryptographic vulnerabilities
2009-02-10 00:00:00
FreeBSD Security Advisory FreeBSD-SA-09:02.openssl
2009-01-09 00:00:00
debian
debian
[SECURITY] [DSA 1702-1] New ntp packages fix cryptographic weakness
2009-01-12 20:34:15
[SECURITY] [DSA 1701-1] New OpenSSL packages fix cryptographic weakness
2009-01-12 20:03:29
oraclelinux
oraclelinux
ntp security update
2009-01-29 00:00:00
openssl security update
2009-01-07 00:00:00
redhat
redhat
(RHSA-2009:0046) Moderate: ntp security update
2009-01-29 00:00:00
(RHSA-2009:0004) Important: openssl security update
2009-01-07 00:00:00
veracode
veracode
Information Disclosure
2020-04-10 00:31:06
Man-in-the-Middle (MitM)
2020-04-10 00:30:43
centos
centos
ntp security update
2009-02-04 18:58:29
openssl, openssl095a, openssl096 security update
2009-02-02 23:30:18
openssl, openssl096b, openssl097a security update
2009-01-07 22:28:50
freebsd_advisory
freebsd_advisory
FreeBSD-SA-09:03.ntpd
2009-01-13 00:00:00
FreeBSD-SA-09:02.openssl
2009-01-07 00:00:00
ubuntu
ubuntu
NTP vulnerability
2009-01-08 00:00:00
OpenSSL vulnerability
2009-01-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package openssl10 version 0.9.8j-alt1
2009-01-08 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 0.9.8j-alt1
2009-01-08 00:00:00
Security fix for the ALT Linux 9 package openssl10 version 0.9.8j-alt1
2009-01-08 00:00:00
seebug
seebug
OpenSSL 'EVP_VerifyFinal'函数签名ιͺŒθ―ζΌζ΄ž
2009-01-08 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2008-5077
2009-01-07 00:00:00
osv
osv
openssl openssl097 - cryptographic weakness
2009-01-12 00:00:00
ubuntucve
ubuntucve
CVE-2008-5077
2009-01-07 00:00:00
CVE-2009-0128
2009-01-15 00:00:00
CVE-2009-0129
2009-01-15 00:00:00
suse
suse
SSL certificate checking bypass in openssl
2009-01-23 16:31:52

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.007 Low

EPSS

Percentile

81.0%

JSON
Related for UB:CVE-2009-0021
nessus29openvas82f52gentoo2fedora5nvd10cve9debiancve3slackware3prion10cvelist10securityvulns4debian2oraclelinux2redhat2veracode2centos3freebsd_advisory2ubuntu2altlinux4seebug1openssl1osv1ubuntucve7suse1