Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2009-0047

Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.3%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2009-0047
  • Gale » Gale » Version: Any
    cpe:2.3:a:gale:gale:*
  • Gale » Gale » Version: 0.15
    cpe:2.3:a:gale:gale:0.15
  • Gale » Gale » Version: 0.15b
    cpe:2.3:a:gale:gale:0.15b
  • Gale » Gale » Version: 0.15c
    cpe:2.3:a:gale:gale:0.15c
  • Gale » Gale » Version: 0.16
    cpe:2.3:a:gale:gale:0.16
  • Gale » Gale » Version: 0.16a
    cpe:2.3:a:gale:gale:0.16a
  • Gale » Gale » Version: 0.17
    cpe:2.3:a:gale:gale:0.17
  • Gale » Gale » Version: 0.17a
    cpe:2.3:a:gale:gale:0.17a
  • Gale » Gale » Version: 0.18
    cpe:2.3:a:gale:gale:0.18
  • Gale » Gale » Version: 0.18b
    cpe:2.3:a:gale:gale:0.18b
  • Gale » Gale » Version: 0.18c
    cpe:2.3:a:gale:gale:0.18c
  • Gale » Gale » Version: 0.19
    cpe:2.3:a:gale:gale:0.19
  • Gale » Gale » Version: 0.19a
    cpe:2.3:a:gale:gale:0.19a
  • Gale » Gale » Version: 0.19b
    cpe:2.3:a:gale:gale:0.19b
  • Gale » Gale » Version: 0.20a
    cpe:2.3:a:gale:gale:0.20a
  • Gale » Gale » Version: 0.21
    cpe:2.3:a:gale:gale:0.21
  • Gale » Gale » Version: 0.90a
    cpe:2.3:a:gale:gale:0.90a
  • Gale » Gale » Version: 0.90b
    cpe:2.3:a:gale:gale:0.90b
  • Gale » Gale » Version: 0.90c
    cpe:2.3:a:gale:gale:0.90c
  • Gale » Gale » Version: 0.91
    cpe:2.3:a:gale:gale:0.91
  • Gale » Gale » Version: 0.91a
    cpe:2.3:a:gale:gale:0.91a
  • Gale » Gale » Version: 0.91b
    cpe:2.3:a:gale:gale:0.91b


Products
Pricing
Contact Us

Shodan ® - All rights reserved