Several functions in recent versions of OpenSSL do not check signatures correctly, which could enable a remote attacker to launch spoofing attacks.