CVE-2009-1417: Medium severity gnutls vulnerability
gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the gnutlsx509verifycertificate function in lib/x509/verify.c in libgnutlsx509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1417?
CVE-2009-1417 has a moderate severity level due to its ability to allow attackers to present invalid certificates.
How do I fix CVE-2009-1417?
To fix CVE-2009-1417, update GnuTLS to version 2.6.6 or later, which includes proper verification of certificate validity times.
Which versions of GnuTLS are affected by CVE-2009-1417?
GnuTLS versions prior to 2.6.6, including 1.0.0 through 2.6.5, are affected by CVE-2009-1417.
What kind of attack is possible with CVE-2009-1417?
CVE-2009-1417 allows remote attackers to exploit the vulnerability to present certificates that are not yet valid or have expired.
Is CVE-2009-1417 related to SSL/TLS security?
Yes, CVE-2009-1417 impacts the SSL/TLS security protocols by not properly verifying X.509 certificate validity, potentially compromising secure connections.