Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ds3k-7ny3-7qbh
Vulnerability ID VCID-ds3k-7ny3-7qbh
Aliases CVE-2009-0653
Summary OpenSSL, probably 0.9.6, does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack, a related issue to CVE-2002-0970.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-287 Improper Authentication
System Score Found at
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
epss 0.0026 https://api.first.org/data/v1/epss?cve=CVE-2009-0653
cvssv2 7.5 https://nvd.nist.gov/vuln/detail/CVE-2009-0653
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0653.json
https://api.first.org/data/v1/epss?cve=CVE-2009-0653
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0653
https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf
http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike
517791 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=517791
cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openssl:openssl:0.9.6:*:*:*:*:*:*:*
CVE-2009-0653 https://nvd.nist.gov/vuln/detail/CVE-2009-0653
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2009-0653
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.49294
EPSS Score 0.0026
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T15:01:18.635463+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0653.json 38.0.0