Man-in-the-Middle (MitM)

samba is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists as it was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-in-the-middle...

Man-in-the-Middle (MitM)

cloudforms is vulnerable to man-in-the-middle attack. It includes a default SSL/TLS certificate for the web server. This certificate is replaced at install time, however if an attacker were able to man-in-the-middle an administrator while installing the new certificate the attacker could get a co...

Man-in-the-Middle (MitM)

python is vulnerable to man-in-the-middle attack. It was found that Python's smtplib library did not return an exception when StartTLS failed to be established in the SMTP.starttls function. A man in the middle attacker could strip out the STARTTLS command without generating an exception on the...

Cipher Bypass

OpenSSL is vulnerable to cipher bypasses. A malicious user can negotiate and complete an SSLv2 handshake with the server even if the ciphers have been disabled on the server. SSLv2 handshakes are vulnerable to man-in-the-middle attacks...

Man-in-the-Middle (MitM)

nss is vulnerable to man-in-the-middle attack. A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could...

Arbitrary Shell Command Execution

Git-fastclone has a flaw that permits execution of arbitrary shell commands from .gitmodules. Attackers can trigger the execution by instructing a user to run a recursive clone from a repository they control. The attack is possible only if a user configures Git to automatically clone submodules...

Man-in-the-Middle (MitM) Attacks

The s3token middleware in python-keystoneclient is vulnerable to man-in-the-middle attacks. This vulnerability is caused when python-keystoneclient disables certificate verification when the "insecure" option is set in a paste.ini file regardless of the value...

Man-in-the-Middle (MitM)

ruby is vulnerable to man-in-the-middle attack. A flaw was found in a way rubygems verified the API endpoint hostname retrieved through a DNS SRV record. A man-in-the-middle attacker could use this flaw to force a client to download content from an untrusted domain...

Man-in-the-middle Attack

Network Security Services NSS is vulnerable to a man-in-the-middle attack. The attack exists because it fails in handling state transitions for the TLS state machine and skips handshake message, allowing a man-in-the-middle to decrypt all traffic...

Man-in-the-Middle (MitM)

openssl is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists as the TLS protocol 1.2 and earlier, when a DHEEXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHEEXPORT choice, which allows man-in-the-middle attackers to conduct...

Man-in-the-Middle (MitM)

redhat-upgrade-tool is vulnerable to man-in-the-middle MitM attack. The tool does not implement proper GPG signature verification when performing package installations, allowing an attacker to perform man-in-the-middle attacks against the client...

Man-in-the-Middle (MitM) Attacks

keystonemiddleware is vulnerable to man-in-the-middle MitM attacks. When the insecure option is set in the paste.ini file, keystonemiddleware will always disable certificate verification, regardless of the variables value...

Man In The Middle (MitM) Attacks Are Possible With Spoofed SSL Servers

The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subjec...

Man-in-the-Middle (MitM)

gnutls is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists as lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof...

Man-in-the-Middle (MitM) Attacks

nss is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists as the sslDo1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services NSS before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by...

Man-in-the-Middle (MitM)

Ruby is vulnerable to man-in-the-middle attack. The SSL client's hostname identity check does not properly handle certificates with hostnames containing NULL bytes. A remote attacker, who has obtained a specific certificate that is signed by an trusted CA, is able to exploit the vulnerability to...

Main-in-the-Middle (MitM)

qpid is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists as the Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows...

Man-in-the-Middle (MitM)

python-qpid is vulnerable to man-in-the-middle attack. SSL connections are not enforced when the qpidprotocol is set to SSL, which would allow a remote attacker to sniff network traffic in a man-in-the-middle attack to obtain confidential information...

Man-in-the-Middle (MitM)

ipa is vulnerable to man-in-the-middle attack. There is no secure way to provide the ipa server's Certificate Authority CA certificate to a client during join, which limited the client's ability to authenticate and verify the server. This allows an attacker to perform a man-in-the-middle attack...

Session ID Disclosure

The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to COOKIE, sends the jsessionid in the URL of the first response of a session, which allows remote attackers to obtain the session id 1 via a man-in-the-middle attack ...