Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
OpenSSL Cryptographic Issues Vulnerability - CVE-2009-2409 - Vulnerability Database
OpenSSL

OpenSSL Cryptographic Issues Vulnerability - CVE-2009-2409

Medium
Reference: CVE-2009-2409
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-2409
Title: OpenSSL Cryptographic Issues Vulnerability
Overview:

The Network Security Services (NSS) library before 3.12.3 as used in Firefox GnuTLS before 2.6.4 and 2.7.4 OpenSSL 0.9.8 through 0.9.8k and other products support MD2 with X.509 certificates which might allow remote attackers to spoof certificates by using MD2 design flaws to generate a hash collision in less than brute-force time. NOTE: the scope of this issue is currently limited because the amount of computation required is still large.