CVE-2009-2409: The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7....

Security readout for executives and security teams

This issue affects old cryptographic libraries that accepted MD2-signed X.509 certificates. In theory, an attacker could use weaknesses in MD2 to create certificate collisions and spoof trust, but the CVE notes the required computation was still large. The main business risk is unmanaged legacy systems still trusting obsolete certificate signatures. Exposure is most likely in legacy Linux, browser, appliance, or embedded environments using the named NSS, GnuTLS, or OpenSSL versions, or vendor packages listed in the 2009 advisories. Modern maintained TLS stacks are less likely exposed, but stale trust stores and bundled libraries need checking. Treat this as a legacy cryptography hygiene issue with meaningful trust implications. It is not flagged as actively exploited in the provided sources, but systems still accepting MD2 certificates should be remediated because certificate spoofing can undermine secure communications. Mitigation focus: Upgrade NSS to 3.12.3 or later where applicable.; Upgrade GnuTLS to 2.6.4, 2.7.4, or later as appropriate.; Replace OpenSSL 0.9.8 through 0.9.8k deployments..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.