CVE-2012-6052

Wireshark 1.8.x before 1.8.4 allows remote attackers to obtain sensitive hostname information by reading pcap-ng files...

CVE-2012-6052

Wireshark 1.8.x before 1.8.4 contains multiple vulnerabilities fixed in the 1.8.4 update. The CVE-2012-6052 hostname disclosure arises from reading pcap-ng files, while additional CVEs (CVE-2012-6053 to CVE-2012-6062) describe DoS/infinite-loop or crash conditions in several dissectors (USB, sFlo...

PT-2012-6243

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.8.x through 1.8.3 Description The issue allows remote attackers to obtain sensitive hostname information by reading pcap-ng files. Recommendations For Wireshark versions 1.8.x through 1.8.3, update to version 1.8.4 or late...

PT-2012-1252

Name of the Vulnerable Software and Affected Versions Apache Commons HttpClient versions prior to 4.2.3 Description The issue is related to insufficient verification of input data in the Apache Commons HttpClient library, part of Apache HttpComponents. This allows a remote attacker to spoof SSL...

CVE-2011-5242

tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5236

Moneris eSelectPlus 2.03 PHP API does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5237

PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5236

Moneris eSelectPlus 2.03 PHP API does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5243

TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5243: Improper Input Validation

TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5242: Improper Input Validation

tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2011-5240: Improper Input Validation

Magento 1.5 and 1.6.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

PT-2012-2216

Name of the Vulnerable Software and Affected Versions CiviCRM versions 4.0.5 and 4.1.1 Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-2214

Name of the Vulnerable Software and Affected Versions PayPal WPS ToolKit affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-2213

Name of the Vulnerable Software and Affected Versions Moneris eSelectPlus version 2.03 Description The issue arises from the failure of the Moneris eSelectPlus 2.03 PHP API to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.50...

PT-2012-2215

Name of the Vulnerable Software and Affected Versions google-checkout-php-sample-code versions prior to 1.3.2 Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. Th...

PT-2012-2219

Name of the Vulnerable Software and Affected Versions tmhOAuth versions prior to 0.61 Description The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because it does not verify that the server hostname matches a domain name in the subject's Common...

PT-2012-2218

Name of the Vulnerable Software and Affected Versions Services Twitter version 0.6.3 Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows man-in-the-midd...

CVE-2012-5819

FilesAnywhere does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2012-5804

The CyberSource module in Ubercart does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...