4 matches found
CVE-2026-129118
C-Kermit 8.0.200 before 11.1.515 contains an improper certificate hostname validation vulnerability that allows attackers to impersonate hosts by abusing wildcard matching in dNSNamecmp in ckssl.c. Attackers holding a trusted certificate with over-matching names containing asterisks, question...
CVE-2026-129118
C-Kermit versions 8.0.200 before 11.1.515 are vulnerable to an improper certificate hostname validation flaw within the dNSName_cmp() function in ck_ssl.c. Attackers can abuse wildcard matching—specifically involving asterisks, question marks, brackets, or empty labels—to impersonate hosts using ...
CVE-2026-129118 C-Kermit 8.0.200 before 11.1.515 Improper Certificate Hostname Matching via dNSName_cmp
C-Kermit 8.0.200 before 11.1.515 contains an improper certificate hostname validation vulnerability that allows attackers to impersonate hosts by abusing wildcard matching in dNSNamecmp in ckssl.c. Attackers holding a trusted certificate with over-matching names containing asterisks, question...
EUVD-2026-125561
C-Kermit 8.0.200 before 11.1.515 contains an improper certificate hostname validation vulnerability that allows attackers to impersonate hosts by abusing wildcard matching in dNSNamecmp in ckssl.c. Attackers holding a trusted certificate with over-matching names containing asterisks, question...