8 matches found
EUVD-2011-5143
Malware in sbrugna...
CVE-2011-5243
TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2011-5243
TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
Code injection
TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2011-5243
TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
CVE-2011-5243
CVE-2011-5243 describes a hostname verification flaw in TwitterOAuth where the server’s hostname is not validated against the certificate’s CN/subjectAltName, enabling MITM with an arbitrary valid certificate. The connected records do not specify affected product versions, exact root cause detail...
PT-2012-2220
Name of the Vulnerable Software and Affected Versions TwitterOAuth affected versions not specified Description The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because TwitterOAuth does not verify that the server hostname matches a domain name i...
CVE-2011-5243: Improper Input Validation
TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...