CVE-2009-2069

CVE-2009-2069 describes a vulnerability in Microsoft Internet Explorer versions prior to 8, where a cached certificate from a legitimate HTTPS site could be displayed for a proxy server's 4xx or 5xx CONNECT error page. This allowed man-in-the-middle attackers to spoof arbitrary HTTPS sites by first obtaining a valid certificate and then serving a crafted error page. The vulnerability has a CVSS score of 5.8, indicating medium severity, with a network attack vector and medium attack complexity, potentially leading to partial confidentiality and integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.