CVE-2009-0125

CVE-2009-0125 describes a vulnerability in the Nessus Attack Scripting Language library (libnasl) 2.2.11, specifically in nasl/nasl_crypto2.c, where it fails to properly check the return value of the OpenSSL DSA_do_verify function. This flaw could allow remote attackers to bypass certificate chain validation through a malformed SSL/TLS signature, affecting products like finkproject libnasl. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is remotely exploitable with low attack complexity, requiring no authentication, and could lead to information disclosure (C:P/I:N/A:N). However, the upstream vendor disputes its security ramifications, stating it has no security impact despite being a misuse of the function. There is no evidence of active exploitation, and no exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of CVEs.