CVE-2009-0653

CVE-2009-0653 describes a critical vulnerability in OpenSSL, likely version 0.9.6, where the software fails to properly validate Basic Constraints in intermediate CA-signed certificates. This flaw enables remote attackers to spoof trusted website certificates, facilitating man-in-the-middle attacks. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.