CVE-2011-0082

The CVE-2011-0082 entry concerns Mozilla Firefox 4.0.x–4.0.1 where the X.509 certificate validation does not properly implement single-session security exceptions. This could allow user-assisted remote attackers to spoof an SSL server using an untrusted certificate and trigger potentially unwante...

Mozilla Firefox SSL证书验证安全漏洞

BUGTRAQ ID: 48064 CVE ID: CVE-2011-0082 Firefox是一款非常流行的开源WEB浏览器。 Mozilla Firefox在实现上存在SSL证书验证安全漏洞，远程攻击者可利用此漏洞欺骗用户，在SSL HTTP连接中使用有效证书时绕过安全限制，发动网络钓鱼似的攻击。 Firefox...