PT-2009-1088 · Gnu · Gnutls

Simon Josefsson · Published 2009-04-30 · Updated 2009-06-10 · CVE-2009-1416

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GnuTLS versions 2.5.0 through 2.6.5

Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely, potentially allowing attackers to spoof signatures on certificates or have other unspecified impacts by leveraging an invalid DSA key. The problem arises from the generation of RSA keys stored in DSA structures instead of the intended DSA keys in the libgnutls library.

Recommendations For versions 2.5.0 through 2.6.5, update to version 2.6.6 or later to resolve the issue. As a temporary workaround, consider restricting the use of the lib/gnutls pk.c function in libgnutls until a patch is available. Avoid using the affected libgnutls library for certificate signature verification until the issue is resolved.

Exploit

Fix

Access of Uninitialized Pointer

Weakness Enumeration

CWE-310

CWE-824

Related Identifiers

BDU:2015-09391

CVE-2009-1416

Affected Products

Gnutls

References · 12

• 🔥 http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516 · Exploit
• 🔥 https://exploit-db.com/exploits/32965 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1416 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:116 · Vendor Advisory
• http://lists.gnu.org/archive/html/help-gnutls/2009-04/msg00018.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09391 · Security Note
• http://security.gentoo.org/glsa/glsa-200905-04.xml · Vendor Advisory
• http://secunia.com/advisories/34842 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1218 · Note
• http://securitytracker.com/id?1022158 · Note
• http://securityfocus.com/bid/34783 · Note
• http://secunia.com/advisories/35211 · Note