CVE-2012-5817

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof...

CVE-2012-5825

Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python httplib library...

CVE-2012-5789: Improper Input Validation

PayPal Payments Standard PHP Library before 20120427 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate,...

PT-2012-6102

Name of the Vulnerable Software and Affected Versions PayPal Payments Standard PHP Library version 20120427 Description The issue arises from the library's failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509...

PT-2012-6106

Name of the Vulnerable Software and Affected Versions osCommerce MoneyBookers module affected versions not specified Description The issue concerns the MoneyBookers module in osCommerce, which fails to verify the server hostname against the domain name in the subject's Common Name CN or...

PT-2012-6124

Name of the Vulnerable Software and Affected Versions ACRA library for Android affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allo...

PT-2012-6097

Name of the Vulnerable Software and Affected Versions Apache Axis2/Java versions 1.6.2 and earlier Description The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because it does not verify that the server hostname matches a domain name in the...

PT-2012-6131 · Filesanywhere · Filesanywhere

Name of the Vulnerable Software and Affected Versions: FilesAnywhere affected versions not specified Description: The issue arises from FilesAnywhere not verifying that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This...

PT-2012-6129 · Codehaus · Xfire

Name of the Vulnerable Software and Affected Versions: Codehaus XFire versions 1.2.6 and earlier Description: The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because it does not verify that the server hostname matches a domain name in the...

PT-2012-6099

Name of the Vulnerable Software and Affected Versions PayPal merchant SDK affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6118

Name of the Vulnerable Software and Affected Versions Zen Cart affected versions not specified Description The issue concerns the PayPal Payments Pro module in Zen Cart, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of th...

PT-2012-6108

Name of the Vulnerable Software and Affected Versions osCommerce affected versions not specified Description The issue concerns the PayPal Pro module in osCommerce, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the X.5...

PT-2012-6092

Name of the Vulnerable Software and Affected Versions Amazon merchant SDK affected versions not specified Description The issue concerns a failure to verify the server hostname against the domain name in the X.509 certificate's Common Name CN or subjectAltName field. This allows man-in-the-middle...

PT-2012-6119

Name of the Vulnerable Software and Affected Versions Zen Cart affected versions not specified Description The issue concerns the Authorize.Net eCheck module in Zen Cart, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of t...

PT-2012-6122 · Jpmorgan Chase · Chase Mobile Banking Application

Name of the Vulnerable Software and Affected Versions: Chase mobile banking application for Android affected versions not specified Description: The issue concerns a failure to verify the server hostname against the domain name in the X.509 certificate's Common Name CN or subjectAltName field. Th...

CVE-2012-5811: Undefined Security Weakness

The Breezy application for Android does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

PT-2012-6127

Name of the Vulnerable Software and Affected Versions Rackspace app version 2.1.5 Description The issue allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate because the app does not verify that the server hostname matches a domain name in the subject's Common...

PT-2012-6126

Name of the Vulnerable Software and Affected Versions Weberknecht affected versions not specified Description The issue arises from the failure to verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate. This allows...

PT-2012-6125

Name of the Vulnerable Software and Affected Versions Android Pusher library for Android affected versions not specified Description The issue concerns a lack of verification in the Android Pusher library that the server hostname matches a domain name in the subject's Common Name CN or...

PT-2012-6117

Name of the Vulnerable Software and Affected Versions Zen Cart affected versions not specified Description The issue concerns the PayPal IPN functionality in Zen Cart, which fails to verify the server hostname against the domain name in the subject's Common Name CN or subjectAltName field of the...