Lucene search
MitreCVELIST:CVE-2009-3456HistorySep 29, 2009 - 5:00 p.m.
CVE-2009-3456
2009-09-2917:00:00
mitre
www.cve.org
17
google chrome
ssl
x.509 certificate
Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a ‘\0’ character in a domain name in the subject’s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Related
nvd
nvd
cve
cve
prion
prion
Design/Logic Flaw
2009-09-29 18:00:00
Code injection
2009-07-30 19:30:00
Design/Logic Flaw
2009-09-08 18:30:00
debiancve
debiancve
openvas
openvas
Google Chrome CA SSL Certificate Security Bypass Vulnerability (Oct 2009)
2009-10-06 00:00:00
SLES9: Security update for OpenLDAP2
2009-10-10 00:00:00
SLES9: Security update for mutt
2009-10-10 00:00:00
nessus
nessus
SuSE 10 Security Update : OpenLDAP 2 (ZYPP Patch Number 6598)
2010-10-11 00:00:00
SuSE9 Security Update : OpenLDAP2 (YOU Patch Number 12506)
2009-09-24 00:00:00
SuSE9 Security Update : mutt (YOU Patch Number 12505)
2009-09-24 00:00:00
threatpost
threatpost
Apple Safari
2009-12-29 21:50:26
seebug
seebug
Mozilla Firefox NULL字符CA SSL证书验证安全绕过漏洞
2009-07-31 00:00:00
mozilla-thunderbird多个安全漏洞
2009-10-10 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 00:33:40
mozilla
mozilla
Compromise of SSL-protected communication — Mozilla
2009-08-01 00:00:00
cvelist
cvelist
exploitdb
exploitdb
ubuntucve
ubuntucve
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2009-42
2009-08-07 00:00:00
fetchmail security announcement fetchmail-SA-2009-01 (CVE-2009-2666)
2009-08-08 00:00:00
[ MDVSA-2013:221 ] php
2013-08-28 00:00:00
f5
f5
SOL14909 - OpenSSL vulnerability CVE-2013-4248
2014-01-15 00:00:00
K15638 : Python vulnerability CVE-2013-4238
2014-10-17 00:00:00
K15683 : Ruby vulnerability CVE-2013-4073
2014-10-09 00:00:00
rubygems
rubygems
CVE-2013-4073 ruby: hostname check bypassing vulnerability in SSL client
2013-06-26 20:00:00
debian
debian
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:06:44
[Backports-security-announce] Security Update for proftpd-dfsg
2010-01-26 21:30:08
aix
aix
Vulnerability in Diffie-Hellman ciphers affects sendmail on VIOS
2010-03-29 15:54:57
talos
talos
Randombit Botan Library X509 Certificate Validation Bypass Vulnerability
2017-04-28 00:00:00