PT-2020-19352

Name of the Vulnerable Software and Affected Versions openfortivpn version 1.11.0 Description An issue in openfortivpn, when used with OpenSSL 1.0.2 or later, causes the tunnel.c component to mishandle certificate validation. This occurs because the hostname check operates on uninitialized memory...

CVE-2020-7042: Improper Certificate Validation

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outcome is that a valid certificate is never accepted only a malformed certificate may be accepted...

CVE-2020-7041: Improper Certificate Validation

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509checkhost negative error code is interpreted as a successful return value...

CVE-2020-7043: Improper Certificate Validation

An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonstrated by a good.example.com\x00evil.example.com attack...

PT-2020-19353

Name of the Vulnerable Software and Affected Versions openfortivpn version 1.11.0 Description An issue was discovered in openfortivpn when used with OpenSSL before 1.0.2, where the tunnel.c file mishandles certificate validation. This occurs because hostname comparisons do not consider '0'...

PT-2020-19351

Name of the Vulnerable Software and Affected Versions openfortivpn version 1.11.0 Description An issue was discovered in openfortivpn when used with OpenSSL 1.0.2 or later, where the tunnel.c file mishandles certificate validation. This occurs because a negative error code from X509 check host is...