CVE-2009-2666

socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification...

PT-2008-3145 · Apple · Safari

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone and iPod touch Description: The issue misinterprets a menu button press as user confirmation for visiting a web site with a self-signed or invalid certificate. This makes it easier for remote...

CVE-2003-0370

Konqueror Embedded and KDE 2.2.2 and earlier does not validate the Common Name CN field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack...

CVE-2003-0355

Safari 1.0 Beta 2 v73 and earlier does not validate the Common Name CN field for X.509 Certificates, which could allow remote attackers to spoof certificates...