CVE-2009-5144

Name of the Vulnerable Software and Affected Versions mod-gnutls (affected versions not specified)

Description The issue concerns the validation of client certificates. When "GnuTLSClientVerify require" is set in a directory context, mod-gnutls fails to validate client certificates, allowing remote attackers to spoof clients by using a crafted certificate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.