CVE-2009-0125

Name of the Vulnerable Software and Affected Versions Nessus Attack Scripting Language library (aka libnasl) version 2.2.11

Description The issue concerns a potential problem in the Nessus Attack Scripting Language library where the return value from the OpenSSL DSA do verify function is not properly checked. This could theoretically allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature. However, the upstream vendor has disputed this issue, stating that although the function is misused, it has no security ramifications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.