CVE-2009-1417
Summary
| CVE | CVE-2009-1417 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-04-30 20:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:L/Au:N/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Gnu | Gnutls | 1.0.16 | All | All | All |
| Application | Gnu | Gnutls | 1.0.17 | All | All | All |
| Application | Gnu | Gnutls | 1.0.18 | All | All | All |
| Application | Gnu | Gnutls | 1.0.19 | All | All | All |
| Application | Gnu | Gnutls | 1.0.20 | All | All | All |
| Application | Gnu | Gnutls | 1.0.21 | All | All | All |
| Application | Gnu | Gnutls | 1.0.22 | All | All | All |
| Application | Gnu | Gnutls | 1.0.23 | All | All | All |
| Application | Gnu | Gnutls | 1.0.24 | All | All | All |
| Application | Gnu | Gnutls | 1.0.25 | All | All | All |
| Application | Gnu | Gnutls | 1.1.13 | All | All | All |
| Application | Gnu | Gnutls | 1.1.14 | All | All | All |
| Application | Gnu | Gnutls | 1.1.15 | All | All | All |
| Application | Gnu | Gnutls | 1.1.16 | All | All | All |
| Application | Gnu | Gnutls | 1.1.17 | All | All | All |
| Application | Gnu | Gnutls | 1.1.18 | All | All | All |
| Application | Gnu | Gnutls | 1.1.19 | All | All | All |
| Application | Gnu | Gnutls | 1.1.20 | All | All | All |
| Application | Gnu | Gnutls | 1.1.21 | All | All | All |
| Application | Gnu | Gnutls | 1.1.22 | All | All | All |
| Application | Gnu | Gnutls | 1.1.23 | All | All | All |
| Application | Gnu | Gnutls | 1.2.0 | All | All | All |
| Application | Gnu | Gnutls | 1.2.1 | All | All | All |
| Application | Gnu | Gnutls | 1.2.10 | All | All | All |
| Application | Gnu | Gnutls | 1.2.11 | All | All | All |
| Application | Gnu | Gnutls | 1.2.2 | All | All | All |
| Application | Gnu | Gnutls | 1.2.3 | All | All | All |
| Application | Gnu | Gnutls | 1.2.4 | All | All | All |
| Application | Gnu | Gnutls | 1.2.5 | All | All | All |
| Application | Gnu | Gnutls | 1.2.6 | All | All | All |
| Application | Gnu | Gnutls | 1.2.7 | All | All | All |
| Application | Gnu | Gnutls | 1.2.8 | All | All | All |
| Application | Gnu | Gnutls | 1.2.8.1a1 | All | All | All |
| Application | Gnu | Gnutls | 1.2.9 | All | All | All |
| Application | Gnu | Gnutls | 1.3.0 | All | All | All |
| Application | Gnu | Gnutls | 1.3.1 | All | All | All |
| Application | Gnu | Gnutls | 1.3.2 | All | All | All |
| Application | Gnu | Gnutls | 1.3.3 | All | All | All |
| Application | Gnu | Gnutls | 1.3.4 | All | All | All |
| Application | Gnu | Gnutls | 1.3.5 | All | All | All |
| Application | Gnu | Gnutls | 1.4.0 | All | All | All |
| Application | Gnu | Gnutls | 1.4.1 | All | All | All |
| Application | Gnu | Gnutls | 1.4.2 | All | All | All |
| Application | Gnu | Gnutls | 1.4.3 | All | All | All |
| Application | Gnu | Gnutls | 1.4.4 | All | All | All |
| Application | Gnu | Gnutls | 1.4.5 | All | All | All |
| Application | Gnu | Gnutls | 1.5.0 | All | All | All |
| Application | Gnu | Gnutls | 1.5.1 | All | All | All |
| Application | Gnu | Gnutls | 1.5.2 | All | All | All |
| Application | Gnu | Gnutls | 1.5.3 | All | All | All |
| Application | Gnu | Gnutls | 1.5.4 | All | All | All |
| Application | Gnu | Gnutls | 1.5.5 | All | All | All |
| Application | Gnu | Gnutls | 1.6.0 | All | All | All |
| Application | Gnu | Gnutls | 1.6.1 | All | All | All |
| Application | Gnu | Gnutls | 1.6.2 | All | All | All |
| Application | Gnu | Gnutls | 1.6.3 | All | All | All |
| Application | Gnu | Gnutls | 1.7.0 | All | All | All |
| Application | Gnu | Gnutls | 1.7.1 | All | All | All |
| Application | Gnu | Gnutls | 1.7.10 | All | All | All |
| Application | Gnu | Gnutls | 1.7.11 | All | All | All |
| Application | Gnu | Gnutls | 1.7.12 | All | All | All |
| Application | Gnu | Gnutls | 1.7.13 | All | All | All |
| Application | Gnu | Gnutls | 1.7.14 | All | All | All |
| Application | Gnu | Gnutls | 1.7.15 | All | All | All |
| Application | Gnu | Gnutls | 1.7.16 | All | All | All |
| Application | Gnu | Gnutls | 1.7.17 | All | All | All |
| Application | Gnu | Gnutls | 1.7.18 | All | All | All |
| Application | Gnu | Gnutls | 1.7.19 | All | All | All |
| Application | Gnu | Gnutls | 1.7.2 | All | All | All |
| Application | Gnu | Gnutls | 1.7.3 | All | All | All |
| Application | Gnu | Gnutls | 1.7.4 | All | All | All |
| Application | Gnu | Gnutls | 1.7.5 | All | All | All |
| Application | Gnu | Gnutls | 1.7.6 | All | All | All |
| Application | Gnu | Gnutls | 1.7.7 | All | All | All |
| Application | Gnu | Gnutls | 1.7.8 | All | All | All |
| Application | Gnu | Gnutls | 1.7.9 | All | All | All |
| Application | Gnu | Gnutls | 2.0.0 | All | All | All |
| Application | Gnu | Gnutls | 2.0.1 | All | All | All |
| Application | Gnu | Gnutls | 2.0.2 | All | All | All |
| Application | Gnu | Gnutls | 2.0.3 | All | All | All |
| Application | Gnu | Gnutls | 2.0.4 | All | All | All |
| Application | Gnu | Gnutls | 2.1.0 | All | All | All |
| Application | Gnu | Gnutls | 2.1.1 | All | All | All |
| Application | Gnu | Gnutls | 2.1.2 | All | All | All |
| Application | Gnu | Gnutls | 2.1.3 | All | All | All |
| Application | Gnu | Gnutls | 2.1.4 | All | All | All |
| Application | Gnu | Gnutls | 2.1.5 | All | All | All |
| Application | Gnu | Gnutls | 2.1.6 | All | All | All |
| Application | Gnu | Gnutls | 2.1.7 | All | All | All |
| Application | Gnu | Gnutls | 2.1.8 | All | All | All |
| Application | Gnu | Gnutls | 2.2.0 | All | All | All |
| Application | Gnu | Gnutls | 2.2.1 | All | All | All |
| Application | Gnu | Gnutls | 2.2.2 | All | All | All |
| Application | Gnu | Gnutls | 2.2.3 | All | All | All |
| Application | Gnu | Gnutls | 2.2.4 | All | All | All |
| Application | Gnu | Gnutls | 2.2.5 | All | All | All |
| Application | Gnu | Gnutls | 2.3.0 | All | All | All |
| Application | Gnu | Gnutls | 2.3.1 | All | All | All |
| Application | Gnu | Gnutls | 2.3.10 | All | All | All |
| Application | Gnu | Gnutls | 2.3.11 | All | All | All |
| Application | Gnu | Gnutls | 2.3.2 | All | All | All |
| Application | Gnu | Gnutls | 2.3.3 | All | All | All |
| Application | Gnu | Gnutls | 2.3.4 | All | All | All |
| Application | Gnu | Gnutls | 2.3.5 | All | All | All |
| Application | Gnu | Gnutls | 2.3.6 | All | All | All |
| Application | Gnu | Gnutls | 2.3.7 | All | All | All |
| Application | Gnu | Gnutls | 2.3.8 | All | All | All |
| Application | Gnu | Gnutls | 2.3.9 | All | All | All |
| Application | Gnu | Gnutls | 2.4.0 | All | All | All |
| Application | Gnu | Gnutls | 2.4.1 | All | All | All |
| Application | Gnu | Gnutls | 2.4.2 | All | All | All |
| Application | Gnu | Gnutls | 2.6.0 | All | All | All |
| Application | Gnu | Gnutls | 2.6.1 | All | All | All |
| Application | Gnu | Gnutls | 2.6.2 | All | All | All |
| Application | Gnu | Gnutls | 2.6.3 | All | All | All |
| Application | Gnu | Gnutls | 2.6.4 | All | All | All |
| Application | Gnu | Gnutls | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Gentoo Linux Documentation -- GnuTLS: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Webmail - OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Support / Security / Advisories / / MDVSA-2009:116 | Mandriva | af854a3a-2127-422b-91ae-364da2661108 | www.mandriva.com | |
| Gentoo update for gnutls - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| GnuTLS Prior to 2.6.6 Multiple Remote Vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| GnuTLS Multiple Vulnerabilities - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| Gmane -- Mail To News And Back Again | af854a3a-2127-422b-91ae-364da2661108 | article.gmane.org | Patch |
| GnuTLS Command Line Interface Does Not Properly Validate X.509 Certificates - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2009-08-11 | Tomas Hoger | The Red Hat Security Response Team has rated this issue as having low security impact. The risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 4, or 5. For further details, see: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1417 |
There are currently no legacy QID mappings associated with this CVE.