entrouvert Lasso 1.9.9.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:entrouvert:lasso:1.9.9.0:*:*:*:*:*:*:*

part: a version: 1.9.9.0 update: *

VendorEntrouvert (cbca5231-98e5-5dcc-9c36-f5b994bd670f)
ProductLasso (5cb4e095-14f1-543b-b323-22989d06f69e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/lasso purl2cpe 2026-06-01 10:15:29.030863
pkg:deb/ubuntu/lasso purl2cpe 2026-06-01 10:15:29.030864
pkg:github/adieu/lasso purl2cpe 2026-06-01 10:15:29.030866
pkg:github/johnmar33/lasso purl2cpe 2026-06-01 10:15:29.030867
pkg:github/mdutton3/lasso purl2cpe 2026-06-01 10:15:29.030868
pkg:gitlab/redhat/lasso purl2cpe 2026-06-01 10:15:29.030870
pkg:rpm/centos/lasso purl2cpe 2026-06-01 10:15:29.030871
pkg:rpm/fedora/lasso purl2cpe 2026-06-01 10:15:29.030872
pkg:rpm/opensuse/lasso purl2cpe 2026-06-01 10:15:29.030874

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0050 vulnerable 2026-06-08 04:51:07.347110 Details available
Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
Published: 2009-01-07T18:00:00.000Z
Updated: 2024-08-07T04:17:10.472Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.