CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2409

The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products support MD2 with X.509 certificates, which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.026

EPSS Ranking 84.9%

CVSS Severity

CVSS v2 Score 5.1

References

Products affected by CVE-2009-2409

Gnu » Gnutls » Version: N/A

cpe:2.3:a:gnu:gnutls:-
Gnu » Gnutls » Version: 1.0.16

cpe:2.3:a:gnu:gnutls:1.0.16
Gnu » Gnutls » Version: 1.0.17

cpe:2.3:a:gnu:gnutls:1.0.17
Gnu » Gnutls » Version: 1.0.18

cpe:2.3:a:gnu:gnutls:1.0.18
Gnu » Gnutls » Version: 1.0.19

cpe:2.3:a:gnu:gnutls:1.0.19
Gnu » Gnutls » Version: 1.0.20

cpe:2.3:a:gnu:gnutls:1.0.20
Gnu » Gnutls » Version: 1.0.21

cpe:2.3:a:gnu:gnutls:1.0.21
Gnu » Gnutls » Version: 1.0.22

cpe:2.3:a:gnu:gnutls:1.0.22
Gnu » Gnutls » Version: 1.0.23

cpe:2.3:a:gnu:gnutls:1.0.23
Gnu » Gnutls » Version: 1.0.24

cpe:2.3:a:gnu:gnutls:1.0.24
Gnu » Gnutls » Version: 1.0.25

cpe:2.3:a:gnu:gnutls:1.0.25
Gnu » Gnutls » Version: 1.1.13

cpe:2.3:a:gnu:gnutls:1.1.13
Gnu » Gnutls » Version: 1.1.14

cpe:2.3:a:gnu:gnutls:1.1.14
Gnu » Gnutls » Version: 1.1.15

cpe:2.3:a:gnu:gnutls:1.1.15
Gnu » Gnutls » Version: 1.1.16

cpe:2.3:a:gnu:gnutls:1.1.16
Gnu » Gnutls » Version: 1.1.17

cpe:2.3:a:gnu:gnutls:1.1.17
Gnu » Gnutls » Version: 1.1.18

cpe:2.3:a:gnu:gnutls:1.1.18
Gnu » Gnutls » Version: 1.1.19

cpe:2.3:a:gnu:gnutls:1.1.19
Gnu » Gnutls » Version: 1.1.20

cpe:2.3:a:gnu:gnutls:1.1.20
Gnu » Gnutls » Version: 1.1.21

cpe:2.3:a:gnu:gnutls:1.1.21
Gnu » Gnutls » Version: 1.1.22

cpe:2.3:a:gnu:gnutls:1.1.22
Gnu » Gnutls » Version: 1.1.23

cpe:2.3:a:gnu:gnutls:1.1.23
Gnu » Gnutls » Version: 1.2.0

cpe:2.3:a:gnu:gnutls:1.2.0
Gnu » Gnutls » Version: 1.2.1

cpe:2.3:a:gnu:gnutls:1.2.1
Gnu » Gnutls » Version: 1.2.10

cpe:2.3:a:gnu:gnutls:1.2.10
Gnu » Gnutls » Version: 1.2.11

cpe:2.3:a:gnu:gnutls:1.2.11
Gnu » Gnutls » Version: 1.2.2

cpe:2.3:a:gnu:gnutls:1.2.2
Gnu » Gnutls » Version: 1.2.3

cpe:2.3:a:gnu:gnutls:1.2.3
Gnu » Gnutls » Version: 1.2.4

cpe:2.3:a:gnu:gnutls:1.2.4
Gnu » Gnutls » Version: 1.2.5

cpe:2.3:a:gnu:gnutls:1.2.5
Gnu » Gnutls » Version: 1.2.6

cpe:2.3:a:gnu:gnutls:1.2.6
Gnu » Gnutls » Version: 1.2.7

cpe:2.3:a:gnu:gnutls:1.2.7
Gnu » Gnutls » Version: 1.2.8

cpe:2.3:a:gnu:gnutls:1.2.8
Gnu » Gnutls » Version: 1.2.8.1a1

cpe:2.3:a:gnu:gnutls:1.2.8.1a1
Gnu » Gnutls » Version: 1.2.9

cpe:2.3:a:gnu:gnutls:1.2.9
Gnu » Gnutls » Version: 1.3.0

cpe:2.3:a:gnu:gnutls:1.3.0
Gnu » Gnutls » Version: 1.3.1

cpe:2.3:a:gnu:gnutls:1.3.1
Gnu » Gnutls » Version: 1.3.2

cpe:2.3:a:gnu:gnutls:1.3.2
Gnu » Gnutls » Version: 1.3.3

cpe:2.3:a:gnu:gnutls:1.3.3
Gnu » Gnutls » Version: 1.3.4

cpe:2.3:a:gnu:gnutls:1.3.4
Gnu » Gnutls » Version: 1.3.5

cpe:2.3:a:gnu:gnutls:1.3.5
Gnu » Gnutls » Version: 1.4.0

cpe:2.3:a:gnu:gnutls:1.4.0
Gnu » Gnutls » Version: 1.4.1

cpe:2.3:a:gnu:gnutls:1.4.1
Gnu » Gnutls » Version: 1.4.2

cpe:2.3:a:gnu:gnutls:1.4.2
Gnu » Gnutls » Version: 1.4.3

cpe:2.3:a:gnu:gnutls:1.4.3
Gnu » Gnutls » Version: 1.4.4

cpe:2.3:a:gnu:gnutls:1.4.4
Gnu » Gnutls » Version: 1.4.5

cpe:2.3:a:gnu:gnutls:1.4.5
Gnu » Gnutls » Version: 1.5.0

cpe:2.3:a:gnu:gnutls:1.5.0
Gnu » Gnutls » Version: 1.5.1

cpe:2.3:a:gnu:gnutls:1.5.1
Gnu » Gnutls » Version: 1.5.2

cpe:2.3:a:gnu:gnutls:1.5.2
Gnu » Gnutls » Version: 1.5.3

cpe:2.3:a:gnu:gnutls:1.5.3
Gnu » Gnutls » Version: 1.5.4

cpe:2.3:a:gnu:gnutls:1.5.4
Gnu » Gnutls » Version: 1.5.5

cpe:2.3:a:gnu:gnutls:1.5.5
Gnu » Gnutls » Version: 1.6.0

cpe:2.3:a:gnu:gnutls:1.6.0
Gnu » Gnutls » Version: 1.6.1

cpe:2.3:a:gnu:gnutls:1.6.1
Gnu » Gnutls » Version: 1.6.2

cpe:2.3:a:gnu:gnutls:1.6.2
Gnu » Gnutls » Version: 1.6.3

cpe:2.3:a:gnu:gnutls:1.6.3
Gnu » Gnutls » Version: 1.7.0

cpe:2.3:a:gnu:gnutls:1.7.0
Gnu » Gnutls » Version: 1.7.1

cpe:2.3:a:gnu:gnutls:1.7.1
Gnu » Gnutls » Version: 1.7.10

cpe:2.3:a:gnu:gnutls:1.7.10
Gnu » Gnutls » Version: 1.7.11

cpe:2.3:a:gnu:gnutls:1.7.11
Gnu » Gnutls » Version: 1.7.12

cpe:2.3:a:gnu:gnutls:1.7.12
Gnu » Gnutls » Version: 1.7.13

cpe:2.3:a:gnu:gnutls:1.7.13
Gnu » Gnutls » Version: 1.7.14

cpe:2.3:a:gnu:gnutls:1.7.14
Gnu » Gnutls » Version: 1.7.15

cpe:2.3:a:gnu:gnutls:1.7.15
Gnu » Gnutls » Version: 1.7.16

cpe:2.3:a:gnu:gnutls:1.7.16
Gnu » Gnutls » Version: 1.7.17

cpe:2.3:a:gnu:gnutls:1.7.17
Gnu » Gnutls » Version: 1.7.18

cpe:2.3:a:gnu:gnutls:1.7.18
Gnu » Gnutls » Version: 1.7.19

cpe:2.3:a:gnu:gnutls:1.7.19
Gnu » Gnutls » Version: 1.7.2

cpe:2.3:a:gnu:gnutls:1.7.2
Gnu » Gnutls » Version: 1.7.3

cpe:2.3:a:gnu:gnutls:1.7.3
Gnu » Gnutls » Version: 1.7.4

cpe:2.3:a:gnu:gnutls:1.7.4
Gnu » Gnutls » Version: 1.7.5

cpe:2.3:a:gnu:gnutls:1.7.5
Gnu » Gnutls » Version: 1.7.6

cpe:2.3:a:gnu:gnutls:1.7.6
Gnu » Gnutls » Version: 1.7.7

cpe:2.3:a:gnu:gnutls:1.7.7
Gnu » Gnutls » Version: 1.7.8

cpe:2.3:a:gnu:gnutls:1.7.8
Gnu » Gnutls » Version: 1.7.9

cpe:2.3:a:gnu:gnutls:1.7.9
Gnu » Gnutls » Version: 2.0.0

cpe:2.3:a:gnu:gnutls:2.0.0
Gnu » Gnutls » Version: 2.0.1

cpe:2.3:a:gnu:gnutls:2.0.1
Gnu » Gnutls » Version: 2.0.2

cpe:2.3:a:gnu:gnutls:2.0.2
Gnu » Gnutls » Version: 2.0.3

cpe:2.3:a:gnu:gnutls:2.0.3
Gnu » Gnutls » Version: 2.0.4

cpe:2.3:a:gnu:gnutls:2.0.4
Gnu » Gnutls » Version: 2.1.0

cpe:2.3:a:gnu:gnutls:2.1.0
Gnu » Gnutls » Version: 2.1.1

cpe:2.3:a:gnu:gnutls:2.1.1
Gnu » Gnutls » Version: 2.1.2

cpe:2.3:a:gnu:gnutls:2.1.2
Gnu » Gnutls » Version: 2.1.3

cpe:2.3:a:gnu:gnutls:2.1.3
Gnu » Gnutls » Version: 2.1.4

cpe:2.3:a:gnu:gnutls:2.1.4
Gnu » Gnutls » Version: 2.1.5

cpe:2.3:a:gnu:gnutls:2.1.5
Gnu » Gnutls » Version: 2.1.6

cpe:2.3:a:gnu:gnutls:2.1.6
Gnu » Gnutls » Version: 2.1.7

cpe:2.3:a:gnu:gnutls:2.1.7
Gnu » Gnutls » Version: 2.1.8

cpe:2.3:a:gnu:gnutls:2.1.8
Gnu » Gnutls » Version: 2.2.0

cpe:2.3:a:gnu:gnutls:2.2.0
Gnu » Gnutls » Version: 2.2.1

cpe:2.3:a:gnu:gnutls:2.2.1
Gnu » Gnutls » Version: 2.2.2

cpe:2.3:a:gnu:gnutls:2.2.2
Gnu » Gnutls » Version: 2.2.3

cpe:2.3:a:gnu:gnutls:2.2.3
Gnu » Gnutls » Version: 2.2.4

cpe:2.3:a:gnu:gnutls:2.2.4
Gnu » Gnutls » Version: 2.2.5

cpe:2.3:a:gnu:gnutls:2.2.5
Gnu » Gnutls » Version: 2.3.0

cpe:2.3:a:gnu:gnutls:2.3.0
Gnu » Gnutls » Version: 2.3.1

cpe:2.3:a:gnu:gnutls:2.3.1
Gnu » Gnutls » Version: 2.3.10

cpe:2.3:a:gnu:gnutls:2.3.10
Gnu » Gnutls » Version: 2.3.11

cpe:2.3:a:gnu:gnutls:2.3.11
Gnu » Gnutls » Version: 2.3.2

cpe:2.3:a:gnu:gnutls:2.3.2
Gnu » Gnutls » Version: 2.3.3

cpe:2.3:a:gnu:gnutls:2.3.3
Gnu » Gnutls » Version: 2.3.4

cpe:2.3:a:gnu:gnutls:2.3.4
Gnu » Gnutls » Version: 2.3.5

cpe:2.3:a:gnu:gnutls:2.3.5
Gnu » Gnutls » Version: 2.3.6

cpe:2.3:a:gnu:gnutls:2.3.6
Gnu » Gnutls » Version: 2.3.7

cpe:2.3:a:gnu:gnutls:2.3.7
Gnu » Gnutls » Version: 2.3.8

cpe:2.3:a:gnu:gnutls:2.3.8
Gnu » Gnutls » Version: 2.3.9

cpe:2.3:a:gnu:gnutls:2.3.9
Gnu » Gnutls » Version: 2.4.0

cpe:2.3:a:gnu:gnutls:2.4.0
Gnu » Gnutls » Version: 2.4.1

cpe:2.3:a:gnu:gnutls:2.4.1
Gnu » Gnutls » Version: 2.4.2

cpe:2.3:a:gnu:gnutls:2.4.2
Gnu » Gnutls » Version: 2.4.3

cpe:2.3:a:gnu:gnutls:2.4.3
Gnu » Gnutls » Version: 2.5.0

cpe:2.3:a:gnu:gnutls:2.5.0
Gnu » Gnutls » Version: 2.6.0

cpe:2.3:a:gnu:gnutls:2.6.0
Gnu » Gnutls » Version: 2.6.1

cpe:2.3:a:gnu:gnutls:2.6.1
Gnu » Gnutls » Version: 2.6.2

cpe:2.3:a:gnu:gnutls:2.6.2
Gnu » Gnutls » Version: 2.6.3

cpe:2.3:a:gnu:gnutls:2.6.3
Gnu » Gnutls » Version: 2.7.0

cpe:2.3:a:gnu:gnutls:2.7.0
Gnu » Gnutls » Version: 2.7.1

cpe:2.3:a:gnu:gnutls:2.7.1
Gnu » Gnutls » Version: 2.7.2

cpe:2.3:a:gnu:gnutls:2.7.2
Gnu » Gnutls » Version: 2.7.3

cpe:2.3:a:gnu:gnutls:2.7.3
Mozilla » Network Security Services » Version: N/A

cpe:2.3:a:mozilla:network_security_services:-
Mozilla » Network Security Services » Version: 3.1

cpe:2.3:a:mozilla:network_security_services:3.1
Mozilla » Network Security Services » Version: 3.1.1

cpe:2.3:a:mozilla:network_security_services:3.1.1
Mozilla » Network Security Services » Version: 3.10

cpe:2.3:a:mozilla:network_security_services:3.10
Mozilla » Network Security Services » Version: 3.10.1

cpe:2.3:a:mozilla:network_security_services:3.10.1
Mozilla » Network Security Services » Version: 3.10.2

cpe:2.3:a:mozilla:network_security_services:3.10.2
Mozilla » Network Security Services » Version: 3.11

cpe:2.3:a:mozilla:network_security_services:3.11
Mozilla » Network Security Services » Version: 3.11.1

cpe:2.3:a:mozilla:network_security_services:3.11.1
Mozilla » Network Security Services » Version: 3.11.10

cpe:2.3:a:mozilla:network_security_services:3.11.10
Mozilla » Network Security Services » Version: 3.11.2

cpe:2.3:a:mozilla:network_security_services:3.11.2
Mozilla » Network Security Services » Version: 3.11.3

cpe:2.3:a:mozilla:network_security_services:3.11.3
Mozilla » Network Security Services » Version: 3.11.4

cpe:2.3:a:mozilla:network_security_services:3.11.4
Mozilla » Network Security Services » Version: 3.11.5

cpe:2.3:a:mozilla:network_security_services:3.11.5
Mozilla » Network Security Services » Version: 3.11.6

cpe:2.3:a:mozilla:network_security_services:3.11.6
Mozilla » Network Security Services » Version: 3.11.7

cpe:2.3:a:mozilla:network_security_services:3.11.7
Mozilla » Network Security Services » Version: 3.11.8

cpe:2.3:a:mozilla:network_security_services:3.11.8
Mozilla » Network Security Services » Version: 3.11.9

cpe:2.3:a:mozilla:network_security_services:3.11.9
Mozilla » Network Security Services » Version: 3.12

cpe:2.3:a:mozilla:network_security_services:3.12
Mozilla » Network Security Services » Version: 3.12.1

cpe:2.3:a:mozilla:network_security_services:3.12.1
Mozilla » Network Security Services » Version: 3.12.2

cpe:2.3:a:mozilla:network_security_services:3.12.2
Mozilla » Network Security Services » Version: 3.2

cpe:2.3:a:mozilla:network_security_services:3.2
Mozilla » Network Security Services » Version: 3.2.1

cpe:2.3:a:mozilla:network_security_services:3.2.1
Mozilla » Network Security Services » Version: 3.3

cpe:2.3:a:mozilla:network_security_services:3.3
Mozilla » Network Security Services » Version: 3.3.1

cpe:2.3:a:mozilla:network_security_services:3.3.1
Mozilla » Network Security Services » Version: 3.3.2

cpe:2.3:a:mozilla:network_security_services:3.3.2
Mozilla » Network Security Services » Version: 3.4

cpe:2.3:a:mozilla:network_security_services:3.4
Mozilla » Network Security Services » Version: 3.4.1

cpe:2.3:a:mozilla:network_security_services:3.4.1
Mozilla » Network Security Services » Version: 3.4.2

cpe:2.3:a:mozilla:network_security_services:3.4.2
Mozilla » Network Security Services » Version: 3.4.3

cpe:2.3:a:mozilla:network_security_services:3.4.3
Mozilla » Network Security Services » Version: 3.5

cpe:2.3:a:mozilla:network_security_services:3.5
Mozilla » Network Security Services » Version: 3.6

cpe:2.3:a:mozilla:network_security_services:3.6
Mozilla » Network Security Services » Version: 3.6.1

cpe:2.3:a:mozilla:network_security_services:3.6.1
Mozilla » Network Security Services » Version: 3.7

cpe:2.3:a:mozilla:network_security_services:3.7
Mozilla » Network Security Services » Version: 3.7.1

cpe:2.3:a:mozilla:network_security_services:3.7.1
Mozilla » Network Security Services » Version: 3.7.2

cpe:2.3:a:mozilla:network_security_services:3.7.2
Mozilla » Network Security Services » Version: 3.7.3

cpe:2.3:a:mozilla:network_security_services:3.7.3
Mozilla » Network Security Services » Version: 3.7.5

cpe:2.3:a:mozilla:network_security_services:3.7.5
Mozilla » Network Security Services » Version: 3.7.7

cpe:2.3:a:mozilla:network_security_services:3.7.7
Mozilla » Network Security Services » Version: 3.8

cpe:2.3:a:mozilla:network_security_services:3.8
Mozilla » Network Security Services » Version: 3.9

cpe:2.3:a:mozilla:network_security_services:3.9
Mozilla » Network Security Services » Version: 3.9.1

cpe:2.3:a:mozilla:network_security_services:3.9.1
Mozilla » Network Security Services » Version: 3.9.2

cpe:2.3:a:mozilla:network_security_services:3.9.2
Mozilla » Network Security Services » Version: 3.9.3

cpe:2.3:a:mozilla:network_security_services:3.9.3
Mozilla » Network Security Services » Version: 3.9.4

cpe:2.3:a:mozilla:network_security_services:3.9.4
Mozilla » Network Security Services » Version: 3.9.5

cpe:2.3:a:mozilla:network_security_services:3.9.5
Openssl » Openssl » Version: 0.9.8

cpe:2.3:a:openssl:openssl:0.9.8
Openssl » Openssl » Version: 0.9.8a

cpe:2.3:a:openssl:openssl:0.9.8a
Openssl » Openssl » Version: 0.9.8b

cpe:2.3:a:openssl:openssl:0.9.8b
Openssl » Openssl » Version: 0.9.8c

cpe:2.3:a:openssl:openssl:0.9.8c
Openssl » Openssl » Version: 0.9.8c-1

cpe:2.3:a:openssl:openssl:0.9.8c-1
Openssl » Openssl » Version: 0.9.8d

cpe:2.3:a:openssl:openssl:0.9.8d
Openssl » Openssl » Version: 0.9.8e

cpe:2.3:a:openssl:openssl:0.9.8e
Openssl » Openssl » Version: 0.9.8f

cpe:2.3:a:openssl:openssl:0.9.8f
Openssl » Openssl » Version: 0.9.8g

cpe:2.3:a:openssl:openssl:0.9.8g
Openssl » Openssl » Version: 0.9.8g-9

cpe:2.3:a:openssl:openssl:0.9.8g-9
Openssl » Openssl » Version: 0.9.8h

cpe:2.3:a:openssl:openssl:0.9.8h
Openssl » Openssl » Version: 0.9.8i

cpe:2.3:a:openssl:openssl:0.9.8i
Openssl » Openssl » Version: 0.9.8j

cpe:2.3:a:openssl:openssl:0.9.8j
Openssl » Openssl » Version: 0.9.8k

cpe:2.3:a:openssl:openssl:0.9.8k

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-2409

Products

Pricing

Contact Us