CVE-2009-1416
published 2009-04-30CVE-2009-1416: lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow…
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
3.90%
89.1th percentile
lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
| gnu | gnutls | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
gnutls: All DSA keys generated using GnuTLS 2.6.x are corrupt [GNUTLS-SA-2009-2]
vendor_redhat·2009-04-30·CVSS 7.5
CVE-2009-1416 [HIGH] gnutls: All DSA keys generated using GnuTLS 2.6.x are corrupt [GNUTLS-SA-2009-2]
gnutls: All DSA keys generated using GnuTLS 2.6.x are corrupt [GNUTLS-SA-2009-2]
lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key.
Statement: Not vulnerable. This issue did not affect versions of gnutls shipped in Red Hat Enterprise Linux 4 and 5 as it only affected gnutls 2.6.x versions.
GHSA
GHSA-xv3p-f59j-cqjv: lib/gnutls_pk
ghsa_unreviewed·2022-05-02
CVE-2009-1416 [HIGH] GHSA-xv3p-f59j-cqjv: lib/gnutls_pk
lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow remote attackers to spoof signatures on certificates or have unspecified other impact by leveraging an invalid DSA key.
No detection rules found.
Exploit-DB
TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities
exploitdb·2009-07-28
CVE-2011-4908 TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities
TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities
---
TinyBrowser (TinyMCE Editor File browser) 1.41.6 - Multiple Vulnerabilities
Discovered by
Aung Khant, YGN Ethical Hacker Group, Myanmar
http://yehg.net/ ~ believe in full disclosure
Advisory URL:
http://yehg.net/lab/pr0js/advisories/tinybrowser_1416_multiple_vulnerabilities
Date published: 2009-07-27
Severity: High
Vulnerability Class: Abuse of Functionality
Affected Products:
- TinyMCE editor with TinyBrowser plugin
- Any web sites/web applications that use TinyMCE editor with TinyBrowser plugin
Author: Bryn Jones (http://www.lunarvis.com)
Author Contacted: Yes
Reply: No reply
Product Overview
TinyBrowser is a plugin of TinyMCE JavaScript editor that acts as
file browser to view, upload, delete, renam
Exploit-DB
GnuTLS 2.6.x - libgnutls lib/gnutls_pk.c DSA Key Storage Remote Spoofing
exploitdb·2009-04-30·CVSS 7.5
CVE-2009-1416 [HIGH] GnuTLS 2.6.x - libgnutls lib/gnutls_pk.c DSA Key Storage Remote Spoofing
GnuTLS 2.6.x - libgnutls lib/gnutls_pk.c DSA Key Storage Remote Spoofing
---
// source: https://www.securityfocus.com/bid/34783/info
GnuTLS is prone to multiple remote vulnerabilities:
- A remote code-execution vulnerability
- A denial-of-service vulnerability
- A signature-generation vulnerability
- A signature-verification vulnerability
An attacker can exploit these issues to potentially execute arbitrary code, trigger denial-of-service conditions, carry out attacks against data signed with weak signatures, and cause clients to accept expired or invalid certificates from servers.
Versions prior to GnuTLS 2.6.6 are vulnerable.
/*
* Small code to reproduce the CVE-2009-1416 bad DSA key problem.
*
* Build it using:
*
* gcc -o cve-2009-1416 cve-2009-1416.c -lgnutls
*
* If your gnutls
http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516http://lists.gnu.org/archive/html/help-gnutls/2009-04/msg00018.htmlhttp://secunia.com/advisories/34842http://secunia.com/advisories/35211http://security.gentoo.org/glsa/glsa-200905-04.xmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:116http://www.securityfocus.com/bid/34783http://www.securitytracker.com/id?1022158http://www.vupen.com/english/advisories/2009/1218http://article.gmane.org/gmane.comp.encryption.gpg.gnutls.devel/3516http://lists.gnu.org/archive/html/help-gnutls/2009-04/msg00018.htmlhttp://secunia.com/advisories/34842http://secunia.com/advisories/35211http://security.gentoo.org/glsa/glsa-200905-04.xmlhttp://www.mandriva.com/security/advisories?name=MDVSA-2009:116http://www.securityfocus.com/bid/34783http://www.securitytracker.com/id?1022158http://www.vupen.com/english/advisories/2009/1218
2009-04-30
Published