CVE-2009-0642

Name of the Vulnerable Software and Affected Versions Ruby versions 1.8 and 1.9

Description The issue is related to the improper checking of the return value from the OCSP basic verify function in the ext/openssl/ossl ocsp.c file. This could allow remote attackers to present an invalid X.509 certificate, possibly involving a revoked certificate.

Recommendations For Ruby version 1.8, update to a version that properly checks the return value from the OCSP basic verify function. For Ruby version 1.9, update to a version that properly checks the return value from the OCSP basic verify function.