Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-1471
camel component
ximian evolution
ssl
certificate verification
man-in-the-middle
cve-2002-1471
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.8%
The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack.
Affected configurations
Node
ximianevolutionMatch1.0.3
ORximianevolutionMatch1.0.4
ORximianevolutionMatch1.0.5
ORximianevolutionMatch1.0.6
ORximianevolutionMatch1.0.7
ORximianevolutionMatch1.0.8
Related
cvelist
cvelist
CVE-2002-1471
2004-09-01 04:00:00
nvd
nvd
CVE-2002-1471
2003-04-22 04:00:00
debiancve
debiancve
CVE-2002-1471
2004-09-01 04:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
59.8%
Related for CVE-2002-1471