CVE-2009-0642: Medium severity ruby-lang Ruby vulnerability
ext/openssl/osslocsp.c in Ruby 1.8 and 1.9 does not properly check the return value from the OCSPbasicverify function, which might allow remote attackers to successfully present an invalid X.509 certificate, possibly involving a revoked certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0642?
The severity of CVE-2009-0642 is medium, due to the potential impact of accepting invalid or revoked certificates.
How do I fix CVE-2009-0642?
To fix CVE-2009-0642, upgrade Ruby to version 1.8.7 or 1.9.2 or later, as these versions include patches for this vulnerability.
What versions of Ruby are affected by CVE-2009-0642?
CVE-2009-0642 affects Ruby versions 1.8 and 1.9.
What is the impact of CVE-2009-0642?
The impact of CVE-2009-0642 allows attackers to present invalid X.509 certificates, which can compromise secured communications.
Is CVE-2009-0642 a remote attack vector?
Yes, CVE-2009-0642 represents a remote attack vector, allowing attackers to exploit the vulnerability over a network.