PHP Improper Input Validation Vulnerability - CVE-2009-3291 - Vulnerability Database

PHP Improper Input Validation Vulnerability - CVE-2009-3291

High

Reference: CVE-2009-3291

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-3291

Title: PHP Improper Input Validation Vulnerability

Overview:

The php_openssl_apply_verification_policy function in PHP before 5.2.11 does not properly perform certificate validation which has unknown impact and attack vectors probably related to an ability to spoof certificates.