CVE-2009-5144

NONE EPSS 53.9%

Published Feb 3, 20188y ago · Modified Jun 16, 20262w ago

Published Feb 3, 2018 8y ago

Last Modified Jun 16, 2026 2w ago

Description

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate.

Threat Intelligence

EPSS Exploit Probability

53.9% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-254

Affected Products 1

Vendor	Product	Version	Range
mod_gnutls_project	mod_gnutls	*	any

References 4

issues.outoforder.cc http://issues.outoforder.cc/view.php?id=93

Broken Link
openwall.com http://www.openwall.com/lists/oss-security/2015/02/26/6

Issue TrackingMailing List
bugs.debian.org https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578663

Issue TrackingMailing ListPatch
bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1197127

Issue TrackingPatch

Remediation

bugs.debian.org https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578663

Issue TrackingMailing ListPatch
bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1197127

Issue TrackingPatch