CVE-2009-0051

Published: Jan 7, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

ZXID 0.29 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.

Affected (27)

Products: Zxid: Zxid

Zxid

1 product

Zxid

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Zxid Zxid	Up to 0.29
Zxid Zxid	Version 0.10
Zxid Zxid	Version 0.11
Zxid Zxid	Version 0.12
Zxid Zxid	Version 0.13
Zxid Zxid	Version 0.14
Zxid Zxid	Version 0.15
Zxid Zxid	Version 0.16
Zxid Zxid	Version 0.17
Zxid Zxid	Version 0.18
Zxid Zxid	Version 0.19
Zxid Zxid	Version 0.1
Zxid Zxid	Version 0.20
Zxid Zxid	Version 0.21
Zxid Zxid	Version 0.22
Zxid Zxid	Version 0.25
Zxid Zxid	Version 0.26
Zxid Zxid	Version 0.27
Zxid Zxid	Version 0.28
Zxid Zxid	Version 0.2
Zxid Zxid	Version 0.3
Zxid Zxid	Version 0.4
Zxid Zxid	Version 0.5
Zxid Zxid	Version 0.6
Zxid Zxid	Version 0.7
Zxid Zxid	Version 0.8
Zxid Zxid	Version 0.9