Lucene search
MitreCVELIST:CVE-2009-3456HistoryOct 03, 2022 - 4:23 p.m.
CVE-2009-3456
2022-10-0316:23:56
mitre
www.cve.org
3
Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a ‘\0’ character in a domain name in the subject’s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Related
cve
cve
nvd
nvd
debiancve
debiancve
prion
prion
Design/Logic Flaw
2009-09-29 18:00:00
Code injection
2009-07-30 19:30:00
Design/Logic Flaw
2013-08-18 02:52:00
nessus
nessus
SuSE 10 Security Update : OpenLDAP 2 (ZYPP Patch Number 6598)
2010-10-11 00:00:00
SuSE9 Security Update : mutt (YOU Patch Number 12505)
2009-09-24 00:00:00
SuSE9 Security Update : OpenLDAP2 (YOU Patch Number 12506)
2009-09-24 00:00:00
openvas
openvas
SLES9: Security update for mutt
2009-10-10 00:00:00
SLES11: Security update for mutt
2009-10-11 00:00:00
Mandrake Security Advisory MDVSA-2009:288 (proftpd)
2009-10-27 00:00:00
threatpost
threatpost
Apple Safari
2009-12-29 21:50:26
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:33:40
Man-in-the-Middle (MitM)
2019-01-15 08:51:35
seebug
seebug
Mozilla Firefox NULL字符CA SSL证书验证安全绕过漏洞
2009-07-31 00:00:00
cvelist
cvelist
mozilla
mozilla
Compromise of SSL-protected communication — Mozilla
2009-08-01 00:00:00
exploitdb
exploitdb
ubuntucve
ubuntucve
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-42
2009-08-07 00:00:00
fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666)
2009-08-08 00:00:00
cURL / libcurl SSL certificate spoofing
2009-08-17 00:00:00
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2010-03-29 15:54:57
debian
debian
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:30:08
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
f5
f5
K15683 : Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00
K15638 : Python vulnerability CVE-2013-4238
2014-10-17 00:00:00
SOL14909 - OpenSSL vulnerability CVE-2013-4248
2014-01-15 00:00:00
talos
talos
Randombit Botan Library X509 Certificate Validation Bypass Vulnerability
2017-04-28 00:00:00