PT-2014-4788

Name of the Vulnerable Software and Affected Versions Claws Mail versions prior to 3.10.0 Description The issue makes it easier for remote attackers to spoof servers and conduct man-in-the-middle MITM attacks by disabling the CURLOPT SSL VERIFYHOST check for CN or SAN host name fields in the feed...

PT-2014-2367

Name of the Vulnerable Software and Affected Versions Zabbix versions 1.8.x through 1.8.17 Zabbix versions 2.0.x through 2.0.7 Zabbix versions 2.1.x through 2.1.1 Description The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, due to the improper...

PT-2013-1240

Name of the Vulnerable Software and Affected Versions libcurl versions 7.21.4 through 7.33.0 curl versions prior to 7.34.0 Description The issue allows remote attackers to conduct man-in-the-middle MITM attacks, making it easier to spoof servers. This is due to the disabling of the CURLOPT SSL...

PT-2013-5064

Name of the Vulnerable Software and Affected Versions cURL and libcurl versions 7.18.0 through 7.32.0 Description The issue arises when cURL and libcurl, built with OpenSSL, have the digital signature verification disabled, which in turn disables the verification of the certificate CN and SAN nam...

PT-2013-1880

Name of the Vulnerable Software and Affected Versions Moodle versions 2.2.11 and earlier Moodle versions 2.3.x before 2.3.9 Moodle versions 2.4.x before 2.4.6 Moodle versions 2.5.x before 2.5.2 Description The issue is related to the Amazon S3 library in Moodle, where it fails to verify the serve...