High severity7.5NVD Advisory· Published Feb 3, 2018· Updated Jun 16, 2026

CVE-2009-5144

Description

mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof clients via a crafted certificate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

mod_gnutls/mod_gnutlsllm-fuzzy

Patches

Vulnerability mechanics

References

bugs.debian.org/cgi-bin/bugreport.cginvdIssue TrackingMailing ListPatch
bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatch
issues.outoforder.cc/view.phpnvdBroken Link
www.openwall.com/lists/oss-security/2015/02/26/6nvdIssue TrackingMailing List

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000