CVE-2009-0269
chain: -1 value from a function call was intended to indicate an error, but is used as an array index instead.
CVE-2002-2227
Unchecked length of SSLv2 challenge value leads to buffer underflow.