EUVD-2014-5838

Malware in sbrugna...

CVE-2014-5951

The SinoPac aka com.sionpac.app.SinoPac application 2.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SinoPac aka com.sionpac.app.SinoPac application 2.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5951

The SinoPac aka com.sionpac.app.SinoPac application 2.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5951

The CVE-2014-5951 entry concerns the SinoPac app (com.sionpac.app.SinoPac) for Android, version 2.4.2, where the SSL/TLS implementation does not verify X.509 certificates from servers. Root cause: missing certificate verification in the app’s TLS handling. Impact: enables man-in-the-middle attack...

PT-2014-6936

Name of the Vulnerable Software and Affected Versions SinoPac application version 2.4.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL servers...

CVE-2014-5951: Undefined Security Weakness

The SinoPac aka com.sionpac.app.SinoPac application 2.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...