CVE-2009-1417

gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully present a certificate that is (1) not yet valid or (2) no longer valid, related to lack of time checks in the _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls_x509, as used by (a) Exim, (b) OpenLDAP, and (c) libsoup.

• gnu gnutls (<= 2.6.5) • gnu gnutls 1.0.16 • gnu gnutls 1.0.17 • gnu gnutls 1.0.18 • gnu gnutls 1.0.19 • gnu gnutls 1.0.20 • gnu gnutls 1.0.21 • gnu gnutls 1.0.22 • gnu gnutls 1.0.23 • gnu gnutls 1.0.24 • gnu gnutls 1.0.25 • gnu gnutls 1.1.13 • gnu gnutls 1.1.14 • gnu gnutls 1.1.15 • gnu gnutls 1.1.16 • gnu gnutls 1.1.17 • gnu gnutls 1.1.18 • gnu gnutls 1.1.19 • gnu gnutls 1.1.20 • gnu gnutls 1.1.21 • gnu gnutls 1.1.22 • gnu gnutls 1.1.23 • gnu gnutls 1.2.0 • gnu gnutls 1.2.1 • gnu gnutls 1.2.2 • gnu gnutls 1.2.3 • gnu gnutls 1.2.4 • gnu gnutls 1.2.5 • gnu gnutls 1.2.6 • gnu gnutls 1.2.7 • gnu gnutls 1.2.8 • gnu gnutls 1.2.8.1a1 • gnu gnutls 1.2.9 • gnu gnutls 1.2.10 • gnu gnutls 1.2.11 • gnu gnutls 1.3.0 • gnu gnutls 1.3.1 • gnu gnutls 1.3.2 • gnu gnutls 1.3.3 • gnu gnutls 1.3.4 • gnu gnutls 1.3.5 • gnu gnutls 1.4.0 • gnu gnutls 1.4.1 • gnu gnutls 1.4.2 • gnu gnutls 1.4.3 • gnu gnutls 1.4.4 • gnu gnutls 1.4.5 • gnu gnutls 1.5.0 • gnu gnutls 1.5.1 • gnu gnutls 1.5.2 • gnu gnutls 1.5.3 • gnu gnutls 1.5.4 • gnu gnutls 1.5.5 • gnu gnutls 1.6.0 • gnu gnutls 1.6.1 • gnu gnutls 1.6.2 • gnu gnutls 1.6.3 • gnu gnutls 1.7.0 • gnu gnutls 1.7.1 • gnu gnutls 1.7.2 … and 57 more