Vulnerability Details : CVE-2009-0789

OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.
Publish Date : 2009-03-27 Last Update Date : 2011-10-25

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Related Tweets Even more tweets Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

Cvss Score	5.0
Confidentiality Impact	None (There is no impact to the confidentiality of the system.)
Integrity Impact	None (There is no impact to the integrity of the system)
Availability Impact	Partial (There is reduced performance or interruptions in resource availability.)
Access Complexity	Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Denial Of Service
CWE ID	189

- Vendor Statements

Not vulnerable. This issue only affects a small number of operating systems and does not affect the openssl packages as shipped with Red Hat Enterprise Linux 2.1, 3, 4 or 5.
Source: Redhat

- Related OVAL Definitions

Title	Definition Id	Class	Family
CVE-2009-0789	oval:org.opensuse.security:def:20090789		unix

OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2009-0789

#	Product Type	Vendor	Product	Version	Update
1	Application	Openssl	Openssl	0.9.1c		Details Vulnerabilities
2	Application	Openssl	Openssl	0.9.2b		Details Vulnerabilities
3	Application	Openssl	Openssl	0.9.3		Details Vulnerabilities
4	Application	Openssl	Openssl	0.9.3a		Details Vulnerabilities
5	Application	Openssl	Openssl	0.9.4		Details Vulnerabilities
6	Application	Openssl	Openssl	0.9.5	Beta1	Details Vulnerabilities
7	Application	Openssl	Openssl	0.9.5	Beta2	Details Vulnerabilities
8	Application	Openssl	Openssl	0.9.5a		Details Vulnerabilities
9	Application	Openssl	Openssl	0.9.5a	Beta1	Details Vulnerabilities
10	Application	Openssl	Openssl	0.9.5a	Beta2	Details Vulnerabilities
11	Application	Openssl	Openssl	0.9.5		Details Vulnerabilities
12	Application	Openssl	Openssl	0.9.6a	Beta2	Details Vulnerabilities
13	Application	Openssl	Openssl	0.9.6m		Details Vulnerabilities
14	Application	Openssl	Openssl	0.9.6e		Details Vulnerabilities
15	Application	Openssl	Openssl	0.9.6a	Beta3	Details Vulnerabilities
16	Application	Openssl	Openssl	0.9.6c		Details Vulnerabilities
17	Application	Openssl	Openssl	0.9.6d		Details Vulnerabilities
18	Application	Openssl	Openssl	0.9.6		Details Vulnerabilities
19	Application	Openssl	Openssl	0.9.6g		Details Vulnerabilities
20	Application	Openssl	Openssl	0.9.6b		Details Vulnerabilities
21	Application	Openssl	Openssl	0.9.6k		Details Vulnerabilities
22	Application	Openssl	Openssl	0.9.6	Beta1	Details Vulnerabilities
23	Application	Openssl	Openssl	0.9.6f		Details Vulnerabilities
24	Application	Openssl	Openssl	0.9.6a		Details Vulnerabilities
25	Application	Openssl	Openssl	0.9.6j		Details Vulnerabilities
26	Application	Openssl	Openssl	0.9.6	Beta2	Details Vulnerabilities
27	Application	Openssl	Openssl	0.9.6i		Details Vulnerabilities
28	Application	Openssl	Openssl	0.9.6a	Beta1	Details Vulnerabilities
29	Application	Openssl	Openssl	0.9.6l		Details Vulnerabilities
30	Application	Openssl	Openssl	0.9.6	Beta3	Details Vulnerabilities
31	Application	Openssl	Openssl	0.9.6h		Details Vulnerabilities
32	Application	Openssl	Openssl	0.9.7	Beta1	Details Vulnerabilities
33	Application	Openssl	Openssl	0.9.7k		Details Vulnerabilities
34	Application	Openssl	Openssl	0.9.7	Beta6	Details Vulnerabilities
35	Application	Openssl	Openssl	0.9.7e		Details Vulnerabilities
36	Application	Openssl	Openssl	0.9.7		Details Vulnerabilities
37	Application	Openssl	Openssl	0.9.7j		Details Vulnerabilities
38	Application	Openssl	Openssl	0.9.7	Beta5	Details Vulnerabilities
39	Application	Openssl	Openssl	0.9.7d		Details Vulnerabilities
40	Application	Openssl	Openssl	0.9.7i		Details Vulnerabilities
41	Application	Openssl	Openssl	0.9.7	Beta4	Details Vulnerabilities
42	Application	Openssl	Openssl	0.9.7c		Details Vulnerabilities
43	Application	Openssl	Openssl	0.9.7h		Details Vulnerabilities
44	Application	Openssl	Openssl	0.9.7	Beta3	Details Vulnerabilities
45	Application	Openssl	Openssl	0.9.7l		Details Vulnerabilities
46	Application	Openssl	Openssl	0.9.7b		Details Vulnerabilities
47	Application	Openssl	Openssl	0.9.7g		Details Vulnerabilities
48	Application	Openssl	Openssl	0.9.7	Beta2	Details Vulnerabilities
49	Application	Openssl	Openssl	0.9.7m		Details Vulnerabilities
50	Application	Openssl	Openssl	0.9.7a		Details Vulnerabilities
51	Application	Openssl	Openssl	0.9.7f		Details Vulnerabilities
52	Application	Openssl	Openssl	0.9.8b		Details Vulnerabilities
53	Application	Openssl	Openssl	0.9.8g		Details Vulnerabilities
54	Application	Openssl	Openssl	0.9.8a		Details Vulnerabilities
55	Application	Openssl	Openssl	0.9.8f		Details Vulnerabilities
56	Application	Openssl	Openssl	0.9.8		Details Vulnerabilities
57	Application	Openssl	Openssl	0.9.8e		Details Vulnerabilities
58	Application	Openssl	Openssl	0.9.8j		Details Vulnerabilities
59	Application	Openssl	Openssl	0.9.8d		Details Vulnerabilities
60	Application	Openssl	Openssl	0.9.8i		Details Vulnerabilities
61	Application	Openssl	Openssl	0.9.8c		Details Vulnerabilities
62	Application	Openssl	Openssl	0.9.8h		Details Vulnerabilities