CVE-2009-2409

CVE-2009-2409 describes a vulnerability in the Network Security Services (NSS) library, GnuTLS, and OpenSSL versions 0.9.8 through 0.9.8k, allowing remote attackers to potentially spoof X.509 certificates. This is due to design flaws in the MD2 hashing algorithm, which could enable hash collisions in less than brute-force time. The vulnerability has a CVSS score of 5.1 (medium severity) with a network attack vector and high attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While the amount of computation required for exploitation was considered large at the time, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.