EUVD-2014-6629

Malware in sbrugna...

Design/Logic Flaw

The Grasshopper Beta aka com.grasshopper.dialer application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6751

The CVE-2014-6751 entry covers the Grasshopper Beta (com.grasshopper.dialer) Android app version 2.1, which does not verify X.509 certificates from SSL servers. This lack of certificate validation enables man-in-the-middle attacks to spoof servers and exfiltrate sensitive information. The NVD rep...

CVE-2014-6751

The Grasshopper Beta aka com.grasshopper.dialer application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7429

Name of the Vulnerable Software and Affected Versions The Grasshopper Beta aka com.grasshopper.dialer application version 2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

CVE-2014-6751: Undefined Security Weakness

The Grasshopper Beta aka com.grasshopper.dialer application 2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...