CVE-2009-5138

GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows…

published March 6, 2014

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a trusted CA to issue new certificates, a different vulnerability than CVE-2014-1959.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01799 · 78.3th percentile
Published
2014-03-06T18:00Z
EPSS history
Timeline
  • 06 MAR 18:00Z
    GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows…
    cvelistv5