CVE-2009-0126: Medium severity Berkeley Boinc Client vulnerability
The Berkeley Open Infrastructure for Network Computing (BOINC) client software incorrectly checked the result after calling the RSApublicdecrypt function, allowing a malformed signature to be treated as a good signature rather than as an error. This issue affected the signature checks on RSA keys used with SSL/TLS.
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511521
This issue is related with recent OpenSSL's CVE-2008-5077 flaw.
Other sources
The decryptpublic function in lib/crypt.cpp in the client in Berkeley Open Infrastructure for Network Computing (BOINC) 6.2.14 and 6.4.5 does not check the return value from the OpenSSL RSApublicdecrypt function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/boinc-client-6.4.5to a version that resolves this vulnerability.Fixed in 2.20081217
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0126?
CVE-2009-0126 is classified as a medium severity vulnerability due to its potential to bypass certificate chain validation.
How do I fix CVE-2009-0126?
To mitigate CVE-2009-0126, upgrade to a patched version of BOINC, specifically versions later than 6.4.5 and 6.2.14.
What systems are affected by CVE-2009-0126?
CVE-2009-0126 affects Berkeley Open Infrastructure for Network Computing (BOINC) clients version 6.2.14 and 6.4.5.
Can CVE-2009-0126 lead to remote attacks?
Yes, CVE-2009-0126 allows remote attackers to exploit the vulnerability to bypass validation mechanisms.
What component is primarily responsible for CVE-2009-0126?
The decrypt_public function in lib/crypt.cpp of BOINC is primarily responsible for the vulnerability identified as CVE-2009-0126.