453 matches found
Design/Logic Flaw
socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification...
CVE-2009-2666
socket.c in fetchmail before 6.3.11 does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification...
OpenSSL/GnuTLS SSL Server Spoofing Vulnerability - Windows
OpenSSL/GnuTLS is prone to an SSL server spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Firefox SSL Server Spoofing Vulnerability - Windows
Mozilla Firefox browser is prone to SSL server spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-2408
Mozilla Network Security Services NSS before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to...
InstallShield Update Services server spoofing
Server's identity is not checked during update rules download...
Dropbear dbclient SSH server spoofing
User is not adequately warned on server crypto key mismatch...
MUTE file sharing peering networks server spoofing
By spoofing mWebCache it's possible to make client to connect to specified IP address...
Microsoft IIS 5.0 - '500-100.asp' Server Name Spoof
/ ==================================================================================== || || || || || || || || || || ==================================================================================== Name: IIS 5.x and IIS 6.0 Server Name Spoof PoC File: IIS5.xandIIS6.0ServerNameSpoof.c...
CVE-2005-2146: Undefined Security Weakness
SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server...
Altiris Deployment Server server spoofing
Mutual authentication absence and multicast based server detection allow to spoof server and obtain full control under managed network...
