Lucene search
RedhatCVELIST:CVE-2009-2417HistoryAug 14, 2009 - 3:00 p.m.
CVE-2009-2417
2009-08-1415:00:00
redhat
raw.githubusercontent.com
lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a ‘\0’ character in a domain name in the subject’s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
Related
prion
prion
Design/Logic Flaw
2009-08-14 15:16:00
Code injection
2009-07-30 19:30:00
Design/Logic Flaw
2009-11-16 19:30:00
openvas
openvas
Mandriva Security Advisory MDVSA-2009:203-1 (curl)
2009-12-10 00:00:00
Mandrake Security Advisory MDVSA-2009:203 (curl)
2009-09-02 00:00:00
Mandriva Security Advisory MDVSA-2009:203-1 (curl)
2009-12-10 00:00:00
debiancve
debiancve
ubuntucve
ubuntucve
nessus
nessus
Mandriva Linux Security Advisory : curl (MDVSA-2009:203-1)
2009-08-17 00:00:00
SuSE9 Security Update : mutt (YOU Patch Number 12505)
2009-09-24 00:00:00
SuSE9 Security Update : OpenLDAP2 (YOU Patch Number 12506)
2009-09-24 00:00:00
securityvulns
securityvulns
[ MDVSA-2009:203 ] curl
2009-08-17 00:00:00
cURL / libcurl SSL certificate spoofing
2009-08-17 00:00:00
Mozilla Foundation Security Advisory 2009-42
2009-08-07 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package curl version 7.19.6-alt1
2009-08-13 00:00:00
Security fix for the ALT Linux 8 package curl version 7.19.6-alt1
2009-08-13 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:33:40
Man-in-the-Middle (MitM)
2020-04-10 00:35:32
Man-in-the-Middle (MitM)
2019-01-15 08:51:35
threatpost
threatpost
Apple Safari
2009-12-29 21:50:26
seebug
seebug
Mozilla Firefox NULL字符CA SSL证书验证安全绕过漏洞
2009-07-31 00:00:00
exploitdb
exploitdb
mozilla
mozilla
Compromise of SSL-protected communication — Mozilla
2009-08-01 00:00:00
cvelist
cvelist
oraclelinux
oraclelinux
curl security update
2009-08-13 00:00:00
redhat
redhat
(RHSA-2009:1209) Moderate: curl security update
2009-08-13 00:00:00
cve
cve
CVE-2009-2417
2009-08-14 15:16:27
CVE-2009-2408
2009-07-30 19:30:00
slackware
slackware
curl
2009-08-14 15:21:33
gentoo
gentoo
cURL: Certificate validation error
2009-09-25 00:00:00
centos
centos
curl security update
2009-08-14 02:34:58
f5
f5
SOL15683 - Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00
SOL15638 - Python vulnerability CVE-2013-4238
2014-09-29 00:00:00
K15683 : Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00
amazon
amazon
Medium: python27
2013-09-04 13:31:00
debian
debian
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2010-03-29 15:54:57