← Database

CVE-2009-5144

HIGH CVSS: 7.5 Published: 2018-02-03 Modified: 2026-06-16

Description

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate.

Affected Platforms

Mod Gnutls Project Mod Gnutls

Weakness Type

CWE-254

References