CVE-2009-0127

CVE-2009-0127 describes a vulnerability in M2Crypto where it fails to properly check return values from OpenSSL verification functions, potentially allowing remote attackers to bypass certificate chain validation through malformed SSL/TLS signatures. This issue affects the heikkitoivonen m2crypto product. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), it represents a medium-severity vulnerability that could lead to information disclosure without requiring authentication or complex attack methods. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and a Linux vendor disputes its relevance to M2Crypto.