CVE-2009-0265

Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025.

• CWE-252
• CWE-295

• http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33Mailing List
• http://secunia.com/advisories/33559Broken Link, Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362Mailing List, Patch
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:037Broken Link
• http://www.vupen.com/english/advisories/2009/0043Broken Link
• https://www.isc.org/node/373Broken Link, Vendor Advisory
• http://groups.google.com/group/comp.protocols.dns.bind/browse_thread/thread/49ef622c8329fd33Mailing List
• http://secunia.com/advisories/33559Broken Link, Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.540362Mailing List, Patch
• http://www.mandriva.com/security/advisories?name=MDVSA-2009:037Broken Link
• http://www.vupen.com/english/advisories/2009/0043Broken Link
• https://www.isc.org/node/373Broken Link, Vendor Advisory

Published

Jan 26, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0259The Word processor in OpenOffice.org 1.1.2 through 1.1.5 all…
• CVE-2009-0260Multiple cross-site scripting (XSS) vulnerabilities in actio…
• CVE-2009-0261Stack-based buffer overflow in EffectMatrix Total Video Play…
• CVE-2009-0262Stack-based buffer overflow in Triologic Media Player 7 and …
• CVE-2009-0263Multiple buffer overflows in Winamp 5.541 and earlier allow …
• CVE-2009-0264Buffer overflow in the Registry Setting Tool in Fujitsu Syst…
• CVE-2009-0266Stack-based buffer overflow in Triologic Media Player 8.0.0.…
• CVE-2009-0267libike in Sun Solaris 9 and 10, and OpenSolaris before snv_1…
• CVE-2009-0268Race condition in the pseudo-terminal (aka pty) driver modul…
• CVE-2009-0269fs/ecryptfs/inode.c in the eCryptfs subsystem in the Linux k…
• CVE-2009-0270Stack-based buffer overflow in PXEService.exe in Fujitsu Sys…
• CVE-2009-0271Directory traversal vulnerability in the TFTP service in Fuj…