CVE-2012-5789

PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate,...

Input validation

PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate,...

CVE-2012-5815

The Rackspace app 2.1.5 for iOS is reported to not verify that the server hostname matches a domain in the certificate’s CN/subjectAltName, enabling man-in-the-middle via arbitrary valid certificates. According to the NVD entry, this yields partial confidentiality and partial integrity impact wit...

CVE-2012-5806

The vulnerability CVE-2012-5806 affects the Zen Cart PayPal Payments Pro module. The issue is that the module does not verify that the server hostname matches a domain in the certificate’s CN or subjectAltName, enabling MITM-style spoofing with arbitrary valid certificates. The root cause is tied...

PT-2012-6134 · Mozilla +1 · Zamboni +1

Name of the Vulnerable Software and Affected Versions: Zamboni affected versions not specified Description: The issue is related to the contribution feature in Zamboni, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the...

RubyGems https vulnerabilities

Insufficient certificate validation, redirection to insecure protocols...

freeradius2 security update

2.1.12-4 - resolves: bug855315 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...

freeradius security update

2.1.12-4 - resolves: bug855316 CVE-2012-3547 freeradius: Stack-based buffer overflow by processing certain expiration date fields of a certificate during x509 certificate validation...

DEBIAN-CVE-2012-1177

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle MITM attack with a spoofed certificate...

CVE-2012-1177

libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obtain user names and passwords via a man-in-the-middle MITM attack with a spoofed certificate...

CVE-2012-1177

CVE-2012-1177 affects libgdata before 0.10.2 and 0.11.x before 0.11.1. The issue is that libgdata did not validate SSL certificates, enabling MITM attackers to obtain user names and passwords via spoofed certificates. Public advisories and patch notes indicate vulnerable builds include libgdata l...

CVE-2012-2132

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

DEBIAN-CVE-2012-2132

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

CVE-2012-2132

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

Authentication flaw

libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote attackers to bypass authentication by connecting with a SSL connection...

CVE-2012-2132

CVE-2012-2132 affects libsoup 2.32.2 and earlier. The flaw: libsoup does not validate certificates or clear the trust flag when the ssl-ca-file is missing, allowing a remote attacker to bypass authentication by using an SSL connection. Publicly documented impact is a certificate/trust bypass rath...

Debian Security Advisory DSA 2482-1 (libgdata)

The remote host is missing an update to libgdata announced via advisory DSA 2482-1. OpenVAS Vulnerability Test $Id: deb24821.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2482-1 libgdata Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Cisco AnyConnect Secure Mobility Client IPsec Certificate Validation Vulnerability

Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an unauthenticated, remote attacker to conduct man-in-the-middle attacks. The vulnerability exists because the affected software does not perform certificate name checking in an X.509 certificate when the software i...

Scientific Linux Security Update : ruby on SL5.x, SL4.x i386/x86_64

A flaw was discovered in the way Ruby's CGI module handles certain HTTP requests. If a remote attacker sends a specially crafted request, it is possible to cause the ruby CGI script to enter an infinite loop, possibly causing a denial of service. CVE-2006-6303 An SSL certificate validation flaw w...