CVE-2009-4831

Cerulean Studios Trillian 3.1 Basic does not verify SSL certificates during MSN authentication, enabling remote attackers to obtain MSN credentials via a man-in-the-middle with a spoofed certificate. CVE-2009-4831. The entry notes a MEDIUM base score (5.8) with network attack vector, no authentic...