CVE-2013-2770

The installation functionality in the Novell Kanaka component before 2.8 for Novell Open Enterprise Server OES on Mac OS X does not verify the server's X.509 certificate during an SSL session, which allows man-in-the-middle attackers to spoof servers via an arbitrary certificate...

CVE-2013-2770

The CVE-2013-2770 issue affects the Novell Kanaka component prior to version 2.8 used with Novell Open Enterprise Server (OES) on macOS. The root cause is that SSL sessions do not verify the server’s X.509 certificate, enabling MITM attackers to spoof servers with an arbitrary certificate. This r...