CVE-2012-5818

ElephantDrive does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5781

The CVE-2012-5781 entry concerns Amazon Elastic Load Balancing API Tools failing to verify that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling potential MITM via an arbitrary valid certificate. The root cause is improper hostname verification, related to over...

CVE-2012-5823

The CVE-2012-5823 issue affects Open Source Classifieds. It describes a failure to verify that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling man-in-the-middle attacks by spoofing SSL servers with arbitrary valid certificates, related to the PHP fsockopen fun...

Tencent 3. vulnerability is a combination of use and solution-vulnerability warning-the black bar safety net

Author: onlyguest Brief description: Permissions bypass+Cross Site+Service end of not verify the=night between 4 million users tragedy Detailed description: The first landing Have a cookie after you open the following page A class=keylink href="http://faxin.soso.com/JSONPageUserGetgold.a%20href= ...