Skip to content
OpenAdvisories
Unscored DSA-1849-1 1 CVE

xml-security-c - signature forgery

Published Aug 2, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 xml-security-c 1.2.1-3+etch1
Debian · 5.0 xml-security-c 1.4.0-3+lenny2

Vulnerabilities 1

  • Medium —
    CVE-2009-0217

    Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation

    The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; (2) the WebLogic Server…

    mono org.apache.santuario:xmlsec xml-security-c xmlsec1 Debian Maven