TinySSL 1.02 does not verify Basic Constraints in intermediate CA-signed certificate, allowing spoofing of trusted sites via man-in-the-middle attack
Reporter | Title | Published | Views | Family All 2 |
---|---|---|---|---|
![]() | CVE-2002-1407 | 1 Sep 200404:00 | – | cvelist |
![]() | CVE-2002-1407 | 11 Apr 200304:00 | – | nvd |
Source | Link |
---|---|
exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/9776 |
securityfocus | www.securityfocus.com/bid/5410 |
archives | www.archives.neohapsis.com/archives/bugtraq/2002-08/0096.html |
marc | www.marc.info/ |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo