← Database

CVE-2008-5077

MEDIUM CVSS: 5.8 Published: 2009-01-07 Modified: 2026-06-16

Description

OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.

Affected Platforms

Openssl Openssl

Weakness Type

CWE-20

References